Security

Your data security and privacy are our top priorities. Learn about our comprehensive security measures.

TheValua implements industry-standard security practices to protect your property data, valuations, and personal information. We continuously monitor and update our security measures to ensure the highest level of protection.

Data Encryption

All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols. This ensures that your property valuations, inspection data, and personal information remain secure during transmission.

HTTPS encryption for all web traffic
Encrypted database storage for sensitive data
Secure file storage with Cloudinary
End-to-end encryption for property images

Authentication & Access Control

We implement robust authentication mechanisms and role-based access controls to ensure only authorized users can access specific data and features.

Secure password hashing with bcrypt
Session-based authentication with encrypted cookies
Role-based permissions (Inspector, Valuer, Council, Super User)
Automatic session timeout for inactive users
Account lockout after multiple failed login attempts

Infrastructure Security

Our infrastructure is built on secure, enterprise-grade platforms with multiple layers of protection.

Database hosted on secure PostgreSQL servers
Regular automated backups with encryption
Firewall protection and DDoS mitigation
Network isolation and access restrictions
Regular security patches and updates

Monitoring & Incident Response

We continuously monitor our systems for suspicious activity and have established procedures for responding to security incidents.

24/7 system monitoring and logging
Automated alerts for suspicious activities
Error tracking with Sentry
Regular security audits and vulnerability assessments
Incident response plan for security breaches

Data Privacy & Compliance

We are committed to protecting your privacy and complying with applicable data protection regulations.

Compliance with Botswana data protection laws
Minimal data collection - only what's necessary
User data segregation by organization
Right to access, correct, and delete your data
Transparent privacy policy and terms of use

Security Best Practices for Users

While we implement robust security measures, your cooperation is essential for maintaining security:

✓ Do:

• Use strong, unique passwords
• Log out when using shared devices
• Keep your credentials confidential
• Report suspicious activities immediately
• Keep your browser updated

✗ Don't:

• Share your account credentials
• Use public Wi-Fi without VPN
• Save passwords in browsers on public computers
• Click suspicious links in emails
• Ignore security warnings

Report a Security Issue

If you discover a security vulnerability or have security concerns, please report them immediately to our security team. We take all security reports seriously and will investigate promptly.

Security Contact:

Email: security@thevalua.com

Response Time: Within 24 hours

Please include detailed information about the issue, including steps to reproduce if applicable.

Security measures last reviewed: November 27, 2025