Trust & security
A record is only useful if it can be trusted.
Here is plainly what HomeRekkord does with your information, who can reach it and what our labels actually mean.
Private-by-default records
A property record is visible only to the people you add to it. Nothing is indexed, listed or shared publicly.
Secure sign-in
Accounts are protected by email-based sign-in with modern session handling. Sessions can be ended from your account.
Role-based access
Owners, co-owners, household members and contributing contractors each see only what their role allows.
Private file storage and expiring links
Uploads are stored privately. Files are served through short-lived links rather than permanent public URLs.
Share-link controls
Every share pack is scoped to chosen items, can be given an expiry date and can be revoked immediately.
Provenance labels
Nothing is presented as verified unless the source supports it.
Audit history
Additions, amendments and share-pack views are recorded so the record can be relied upon.
UK GDPR rights
You can access, correct, export and erase your personal data. We act as the data controller for your account information.
Data export and deletion
Export your record at any time. Deletion requests are processed within 30 days, subject to any legal retention duties.
What our labels mean
- Supplied
- Someone entered this. It has not been checked by anyone else.
- Attested
- The contractor who did the work confirmed it, with their identity and a date attached.
- Source-matched
- The value matches an attached document we hold, such as an invoice or certificate.
- Not independently verified
- HomeRekkord does not currently operate an issuer-verification workflow. No entry is presented as confirmed by the body that issued it, and no label on this platform should be read as independent verification.
Responsible disclosure
If you believe you have found a security issue, please contact security@homerekkord.com with enough detail to reproduce it. We will acknowledge receipt and keep you updated. Please do not test against other people's records.
An honest limitation
We run automated platform security checks and follow least-privilege access rules, but automated checks are not a substitute for an independent security audit. We hold no security certification today, and we will say so plainly until we do.