Managator
Get Started

Enterprise-grade security, built in

Managator is built with security at its core. Every layer of the platform is designed to protect your data and your tenants' information.

Authentication & Access Control

  • Role-based access control with five distinct permission levels
  • Automatic account lockout after failed login attempts
  • Strong password enforcement with bcrypt hashing (industry standard)
  • Session management with automatic expiration and invalidation on password changes
  • Two-factor authentication support via authenticator apps (rolling out)

API & Network Protection

  • All data transmitted over TLS 1.2+ encryption
  • HTTPS and HSTS enforced on every connection
  • Login endpoints protected against brute force with automatic lockout
  • Every API request is authenticated and scoped to your organization

Infrastructure Security

Managator is hosted on cloud infrastructure powered by Vercel and Neon:

  • SOC 2 Type II certified infrastructure, independently audited security controls
  • ISO 27001 certified infrastructure, the international standard for information security management
  • AES-256 encryption at rest for all stored data
  • TLS 1.2+ encryption in transit for all network communication
  • Automatic backups and disaster recovery
  • Infrastructure monitored 24/7

Data Privacy

  • Tenant and financial data is isolated per organization
  • Session-based authentication, no tokens stored in browsers
  • Password hashing with bcrypt (industry standard)
  • No third-party tracking or data sharing

AI-powered, privacy-first

Managator's AI features are built with security at their core. Every interaction is protected by multiple layers of safeguards.

Data Protection

  • Personal information (emails, phone numbers, SSNs) is automatically stripped before being sent to any AI model
  • Applicant identities are anonymized during AI-assisted triaging
  • AI has no memory between sessions, your data is never retained or used for training

Access Controls

  • AI management tools are restricted to authorized roles only
  • Every AI interaction is logged with full audit trails, including user, endpoint, timestamp, and token usage
  • Audit logs are available to platform administrators for compliance review

Input Safeguards

  • Message size and volume limits prevent abuse
  • Prompt injection attacks are actively blocked, the AI will not follow instructions that attempt to override its security rules
  • All user inputs are sanitized before processing

Scoped Intelligence

  • The AI assistant can only access data within your account, it cannot see or reference other users' information
  • AI cannot execute code, run database queries, or access system internals
  • Responses are limited to property management guidance within your permissions