Security & Data Protection

Effective: September 15, 2026   •   Draft for legal/production review before commercial launch.

Security Approach

HEAS is being designed around controlled management access, property-level data boundaries, operational station identity, auditable custody transactions, and secure administration.

Management Access

Management functionality is designed to use authenticated sessions, role-based authorization and multi-factor authentication. Operational employee scanning is distinct from management authentication.

Auditability

HEAS maintains custody history and supports security/audit logging to help customers understand operational and management activity.

Data Boundaries

Property administration is designed to be scoped to the property a user is authorized to manage. Platform administration is separated from customer property administration.

Responsible Disclosure

If you believe you have discovered a security issue involving HEAS, contact hello@heascloud.com with enough information for us to investigate. Do not access, modify, or retain data that does not belong to you.

Production Notice

Security architecture, hosting controls, backups, retention, incident response, subprocessors and contractual commitments should be documented and reviewed before production launch.