Skip to content
PlatformNetworkAI & automationSecurityPricingFAQ
+34 951 400 072
Ver esta página en español

Security and data protection

The most valuable thing your agency owns is its data.

Your clients, your properties, your history. Inmobalia protects them the way you would: carefully, and with people who know what they are doing.

Book a demoSee how it works

Access control, in plain language

Who sees your data? Only who you allow.

Every connection is limited to the scopes you approve, every person to the roles you assign, and every action is written to a log you can read. All of it hosted in the EU.

The four layers
Diagram: your agency's data sits at the centre, inside four layers. Outermost, apps and AI agents only get the scopes you approve, such as properties:read. Next, each person's role and permissions decide what they see and edit. Every user action is written to the activity log, and the data is backed up several times a day. Everything is hosted in the EU under GDPR and monitored 24/7.

The four layers

Access control in plain language first, technical detail second.

  1. Scopes you approve

    When you connect HubSpot, your website or an AI agent, you choose what it may read or change. Every connection gets only the access you grant.

    Technical detail

    Apps sign in with OAuth2 and receive per-resource scopes. Personal access tokens for your own scripts can be revoked whenever you choose.

    • properties:read
    • contacts:write
    • sales:read

  2. Roles & permissions

    Decide who sees and edits what, user by user. A sales agent can work on their own listings and contacts without seeing every other agent’s contacts.

    Technical detail

    Granular roles and permissions, assigned user by user. Each licence is an office.

  3. Activity log

    Every user action is recorded, so you always know who changed what, and when.

    Technical detail

    Full user activity logs: which user did what, and when.

  4. Backups

    Your data is backed up several times every day. You don’t have to remember to do it.

    Technical detail

    Multiple backups every day, on infrastructure monitored 24/7.

How a request travels

From a connected app or a person, to your data, and back.

Swipe sideways to explore

Illustrative exampleAPI and MCP access only your agency's own CRM data, not shared MLS inventory.Diagram: apps and AI agents (your website, HubSpot via Zapier, an AI agent via MCP) pass through the scopes you approve. The website with properties:read and HubSpot with contacts:read get through; the AI agent asking for contacts:write is stopped because that scope was not granted. People on your team pass through their role: a sales agent can view office properties and edit their own listings, but cannot see other agents' contacts or delete records. Requests that get through reach your agency's data: properties, contacts and leads, sales and tasks, documents and calendar. Shared MLS inventory is not exposed through API or MCP. Every user action is written to the activity log, for example a price change from 4.950.000 € to 4.750.000 €. The data is backed up several times a day. The platform is monitored 24/7, and everything is hosted in the EU under GDPR.

Underneath it all

Hosted in Europe, watched around the clock

Hosted in the EU, GDPR compliant

Your agency’s data is stored in the European Union, under European data-protection rules.

24/7 monitoring

The platform is watched around the clock, every day of the year.

Human support

A person answers. Every time.

Every call, ticket and email is answered by someone on our team. No answering machine. Ask us anything about how your data is handled. A data processing agreement is provided with your contract.

+34 951 400 072

Monday to Friday, 10:00-16:00

Questions about a specific setup?

Franchises, associations and multi-office agencies have particular needs. Ask us and we will walk you through yours.

Book a demoSee pricing

Call us at +34 951 400 072. A person answers.