Security
Your tenants’ details, kept private.
Encrypted with 256-bit AES. Never used to train AI. Deleted in one click whenever you ask.
Built in from day one
Each owner sees only their own data
Your properties and tenants are visible only to you.
You decide what Gesti does alone
Gesti asks before changing your records. You set what it can do alone.
No training on your data
Your messages and records are never used to train AI.
Encrypted in transit and at rest
256-bit AES encryption on SOC 2 Type II infrastructure.
No passwords to leak
Sign in with a one-time email code. API keys can be revoked anytime.
A full activity history
Every message, repair and approval is logged with a time.
Certifications and compliance
Gestia runs on SOC 2 Type II certified infrastructure. Our own audits and certifications are under way, and each one appears here as it is completed.
Read the questions- UAE PDPLAligned with Federal Decree-Law 45/2021In place
- SOC 2 Type IIInfrastructureIn place
- SOC 2 Type IIGestia auditComing soon
- ISO 27001Information securityComing soon
- ISO 27701Privacy managementComing soon
- ISO 42001AI managementComing soon
- Pen testIndependent testingComing soon
Security is part of everything Gesti does
Every dashboard view is scoped to its owner, every change to your records can wait for your OK, and every action is logged. We test and tighten these controls as Gestia grows.
What counts as customer data?
Your details and your tenants’: names, phone numbers, emails, unit and lease records, messages with Gesti, tickets, and any documents you upload.
Where is my data stored?
Records are stored with Convex on Amazon Web Services, and Gesti runs on Railway. Both are outside the UAE today. UAE hosting is on our roadmap.
Who can see my data?
You, when signed in. Tenants only ever see their own conversation with Gesti. Contractors only get the details of the job they are sent.
Is my data used to train AI?
No. Gestia uses AI providers’ business APIs, which do not train models on customer data.
What about iMessage, WhatsApp and Telegram?
Messages travel through the app you and your tenants already use, like any other chat. Gestia keeps a copy so it can run the ticket and show you the history.
How do I report a security issue or delete my data?
Email hello@gestiaa.com. We reply within one working day, and delete your data on request.
Coming soon for larger portfolios
- Coming soon
Zero data retention
AI providers delete prompts and replies as soon as they answer.
- Coming soon
UAE data hosting
Keep your records inside the UAE.
- Coming soon
Single sign-on
SAML sign-in for management company teams.
- Coming soon
Team roles and permissions
Give each staff member only the buildings and actions they need.
- Coming soon
Self-serve export and deletion
Download or delete your data from settings.
- Coming soon
Security portal
Policies, audit reports and sub-processors in one place.