Review draft: confirm the inspection app’s hosting, access controls, subprocessors, retention and contractual data protection arrangements before publication. This page does not certify a particular security standard.
Our approach
Awaab Comply is used in a setting where investigation records may contain sensitive information. We take data protection seriously and aim to make it straightforward for housing providers to raise security and procurement questions.
Our approach focuses on authorised access, appropriate handling of information, secure operational use and data minimisation.
Website and inspection service
This website and its enquiry forms are provided through Genie/HighLevel. The operational inspection app is a separate service. Hosting and processing arrangements for the app should be assessed through the relevant service documentation and data processing agreement, rather than inferred from the website’s hosting.
For confirmed hosting locations and supplier information, email [email protected].
Information handled
Depending on the agreed service and how your organisation uses it, investigation records may include:
- Case and property details.
- Inspection notes, observations and photographs.
- Measurements and other recorded inputs.
- Report outputs and information relevant to the investigation.
Capture only the information needed for the investigation and agreed service. Use an appropriate transfer route for sensitive case information; do not send it through a general demo enquiry form.
Account access
Access should be limited to authorised users and the permissions needed for their roles. Discuss your organisation’s requirements for account administration, access reviews and the removal of staff access during procurement and onboarding.
Operational security for your team
- Use strong, unique passwords and secure device access, such as a PIN or biometrics.
- Keep operating systems, apps and browsers updated.
- Remove access promptly when staff leave or change roles.
- Avoid shared logins.
- Follow your organisation’s device, incident-reporting and information-handling procedures.
- Keep sensitive inspection information available only to people who need it.
Procurement questions
Send us your security questionnaire or requirements. Useful areas to cover include hosting and data locations, supplier/subprocessor arrangements, access controls, data retention and deletion, backup and recovery, incident handling and the contractual responsibilities of each party.
We will provide the information relevant to the proposed service and identify any requirements that need to be agreed before rollout.
Privacy and data protection
Read our Privacy Policy for website and enquiry data. App case-data responsibilities and any processing carried out on behalf of a housing provider should be addressed in the applicable service and data processing arrangements.
Raise a concern
For a security concern, data protection question or procurement enquiry, contact [email protected]. Describe the issue without including unnecessary personal information. We can agree a suitable route for any sensitive detail.