Security and data protection at Fructus
Your property information deserves protection.
Property portfolios contain important information, from ownership and tenancy records to compliance certificates and supporting documents.
Fructus is designed to help keep that information organised and protected, with controlled account access, private document storage and safeguards built into the way customer information is handled.
Last reviewed: 11 October 2026
Practical safeguards, explained plainly.
This page sets out how Fructus handles access, accounts, documents and infrastructure, in language intended for landlords, property companies and property managers rather than developers. It describes what Fructus does today, and is clear about where responsibilities sit with our infrastructure providers and with you.
Your portfolio. Your organisation.
Fructus organises customer information by organisation. Access controls in the application, together with database Row Level Security, are designed to restrict each customer to the information belonging to the organisations they are authorised to access.
Customer roles support different levels of access within an organisation, so property companies and managers can organise their teams without giving everyone unrestricted access to everything.
Protected accounts and sessions
Signing in to Fructus is protected at each step, from creating an account to leaving it unattended.
- Customer accounts are confirmed by email before use.
- You sign in with your email address and password.
- Application sessions are protected and encrypted.
- In production, session cookies are HttpOnly and Secure, which keeps them out of reach of page scripts and limits them to encrypted connections.
- Inactivity sign-out can be configured, so an unattended session ends.
- Sessions expire, and you can log out at any time.
- If you forget your password, you can recover access to your account.
Private document storage
Documents you upload to Fructus are kept in private storage rather than being publicly accessible. Access to a document is authorised by the application before it is provided, and supporting documents stay connected to the relevant property and tenancy records, as described on our Documents and Tenancy Management feature pages.
Sensitive tenancy evidence has additional access restrictions, with authorised access controlled separately from ordinary documents. Supported application uploads are checked against permitted file types and size limits.
Encryption and infrastructure protection
Information travelling between your browser and Fructus is protected by HTTPS, and application sessions use encryption. Our infrastructure providers supply encryption at rest for the data they hold.
Fructus uses established infrastructure services rather than operating its own physical data centre. Supabase provides our production database and primary document storage, and the production Supabase project is hosted in the London region. Certifications held by infrastructure providers belong to those providers, not to Fructus.
Activity records and accountability
Fructus records relevant application activity and administrative events. These records support visibility and accountability when several people are working across a portfolio, alongside the history held in portfolio management and property compliance records.
Data control and responsible handling
Authorised customers can access their records in Fructus and use the document downloads and supported export functions available in the application.
For questions about personal data, please read our Privacy Policy. Contractual arrangements are set out in our Customer Terms. For anything else, contact us.
Security is an ongoing responsibility
Protecting customer information depends on application safeguards, provider infrastructure and responsible account use working together. Use a strong, unique password for Fructus, and review who has access to your organisation as your team changes.
Security questions, answered.
How does Fructus protect my property information?
Fructus combines email-confirmed accounts, password sign-in, protected and encrypted sessions, organisation-scoped access controls with database Row Level Security, private document storage and HTTPS. It is hosted on established infrastructure services whose providers supply encryption at rest.
Can other Fructus customers see my portfolio?
Fructus is designed so that customers can only access the organisations they are authorised to access. Organisation-scoped access controls and database Row Level Security restrict access to each organisation's information. Customer information is held in shared infrastructure rather than a separate physical database for each organisation.
Are uploaded property documents private?
Yes. Uploaded documents are kept in private storage rather than being publicly accessible, and access is authorised by the application. Sensitive tenancy evidence has additional access restrictions. Supported uploads are checked against permitted file types and size limits; Fructus does not currently describe this as antivirus or malware scanning.
Can I control who has access within my organisation?
Yes. Customer roles support different levels of access within an organisation, so you can give team members the access they need rather than unrestricted access. We recommend reviewing access whenever your team changes.
Is Fructus data encrypted?
Information is protected in transit by HTTPS, application sessions use encryption, and our infrastructure providers supply encryption at rest. Fructus does not offer end-to-end encryption.
Does Fructus store all information in the UK?
Our production database and primary document storage are provided by Supabase, and the production Supabase project is hosted in the London region. Fructus also uses other service providers, such as for application hosting and backups, so we do not claim that every service or data flow is exclusively UK-hosted. Our Privacy Policy contains further information.
What happens if I need help with a security concern?
Please get in touch through our Contact page and describe the concern. For questions about personal data, see our Privacy Policy, and for contractual matters, our Customer Terms.
Manage your portfolio with confidence.
Bring your properties, tenancies, documents and compliance records together in one organised platform, supported by practical safeguards for your information.
Want to know how backups and recovery work? Read about business continuity
This page is informative and does not form part of your contract with Fructus. Binding terms are set out in our Customer Terms and Privacy Policy.
Last reviewed: 11 October 2026