Legal
Security
Last updated September 13, 2026
Contents
Security is central to how we build PropertyStack. This page summarizes the technical and organizational safeguards that protect this website and the PropertyStack product. Enterprise buyers and customers can request further detail under NDA by contacting security@propertystack.ai.
PropertyStack is operated by PropertyStack Software Pty Ltd (ABN 91 674 505 821) ("PropertyStack", "we", "us", "our"), an Australian private company based in Brisbane, Queensland, Australia. How we collect, use and disclose personal information is described in our Privacy Policy; this page focuses on the security measures that protect that information and our services.
This page is effective as of July 11, 2026 and was last updated on September 13, 2026.
Encryption
Data is encrypted in transit using TLS. Data at rest is encrypted using industry-standard algorithms.
Payment card data is not stored on PropertyStack servers. Card payments through PS Pay are processed by Kovena, our third-party payments provider, which handles cardholder data under its own terms and privacy policy.
Privacy framework
Our baseline privacy regime is the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We review our security measures on an ongoing basis and update them as our services and the threat landscape evolve, without materially reducing the level of protection.
Access controls
We follow least-privilege access, use role-based controls and require strong authentication for internal systems. Access to production systems and customer data is limited to personnel who need it to perform their roles, and those personnel are bound by confidentiality obligations.
Hosting and infrastructure
This website is hosted on infrastructure provided by Vercel Inc. in the United States. The PropertyStack product runs on reputable cloud infrastructure providers located in Australia and the United States, each of which maintains its own physical and network security controls.
We use a limited set of service providers to deliver our services, and we impose contractual obligations on them to protect the data they process for us. Our AI providers process customer and visitor data solely to provide the service to us; we do not permit them to use that data to train their general-purpose models, and we retain human oversight for consequential actions. The authoritative, current list of product sub-processors accompanies our signable Data Processing Addendum, available on request from legal@propertystack.ai; we give customers at least 30 days' notice of new sub-processors, with a right to object.
Reporting a vulnerability
If you believe you have found a security issue affecting PropertyStack, please email security@propertystack.ai with enough detail for us to reproduce and assess it. We appreciate responsible disclosure, and we will review and respond to good-faith reports promptly. For general privacy questions, contact privacy@propertystack.ai; for anything else, support@propertystack.ai.