Industry-standard protection in transit and at rest, backed by managed cloud storage with automated, encrypted backups. The specifics are maintained with our infrastructure provider and available under a DPA.

Property managers, regional leads, and portfolio roles each see only the properties they own. Tenants only see their own thread. Scoping is enforced server-side — Clara never gets a request without it.

Dashboard actions and Clara tool calls are captured alongside the conversation they belong to. Operators can replay what happened, who did it, and why, without leaving the record.

Records stay with the account for the life of the subscription and a short window after. Exact windows by data type live in the DPA, sized to the obligations the operator needs to meet.

Conversations, work orders, and leasing pipelines are exportable on request. Tenants can ask the property manager for a copy of what we hold, and we help assemble it.

Delete requests are actioned on request, with normal legal-hold and accounting obligations respected. STOP on SMS lands a contact on a permanent suppression list — no further Clara messages, ever.