Security
Qascade is built to support residential developers managing commercially sensitive project information, including feasibility assumptions, cashflow forecasts, documents, emails, milestones, contacts, entities and AI-assisted project intelligence.
We understand that development data is not just operational information. It can include acquisition strategy, project financials, lender correspondence, consultant advice, legal documents, contracts, purchaser information and commercially sensitive decisions.
Security is therefore treated as a core part of the Qascade platform, not an afterthought.
Our security approach
Qascade is designed around three security principles:
- Protect access to your workspace
- Keep portfolio data properly separated
- Limit access to information to the people and systems that need it
We take practical, commercially appropriate steps to protect customer information across authentication, infrastructure, access control, data handling, integrations and AI-assisted workflows.
Account and access security
Qascade supports secure account access through email and password authentication, Google sign-in, and optional multi-factor authentication.
Users can enable time-based one-time password authentication for additional account protection. Where enabled, users are required to complete an MFA challenge when signing in.
Access to each Qascade workspace is controlled through portfolio membership and user roles. Portfolio owners can invite members, manage access and remove users who no longer require access.
Portfolio data separation
Qascade is built as a multi-portfolio platform. Project, document, contact, entity, financial and email data is scoped to the relevant portfolio.
We use access control rules to help ensure users can only access information they are authorised to view within their portfolio.
This is particularly important for developers, consultants, investors and operating teams who may be involved across different projects, entities or workspaces.
Data protection
Qascade uses secure infrastructure providers to store and process platform data. We take reasonable steps to protect customer information from unauthorised access, misuse, interference, loss, modification or disclosure.
Security measures may include:
- Authentication controls
- Role-based access permissions
- Portfolio-level data separation
- Secure database access rules
- Encrypted transmission of data
- Controlled access to production systems
- Infrastructure-level security protections
- Monitoring and logging of key system activity
- Secure handling of uploaded documents and files
No digital platform can guarantee absolute security, but Qascade is designed to reduce unnecessary exposure and protect commercially sensitive project data through layered security controls.
Documents and files
Qascade allows users to upload, manage and review project documents, entity documents, contracts, invoices, emails and attachments.
Uploaded documents are stored using secure cloud infrastructure and are made available only to authorised users within the relevant workspace.
Where document analysis or extraction features are used, documents may be processed to identify key project information, such as dates, amounts, parties, references, risks, terms or action items.
Users remain responsible for ensuring that documents uploaded to Qascade are appropriate for the relevant workspace and user group.
Email security
Where email intelligence is enabled, Qascade may connect to approved mailboxes and process relevant emails, threads and attachments to help identify project information, route correspondence, detect actions and support project knowledge.
Email processing is designed to improve visibility across development workflows while keeping the user in control of what is linked, reviewed and relied upon.
Where human review queues are used, users can approve, correct or exclude information before it becomes part of the project record.
AI-assisted workflows
Qascade includes AI-assisted features, including Qassie, document analysis, email intelligence, project fact extraction, action detection and report generation.
AI is used to help summarise, classify, extract and interpret project information. It is not intended to replace professional judgement.
We design AI-assisted workflows with review and control in mind. Where Qascade surfaces suggested actions, extracted facts, summaries or recommendations, users should review the output before relying on it for commercial, financial, legal, planning or project decisions.
Third-party providers and integrations
Qascade may use trusted third-party service providers for infrastructure, authentication, email connectivity, AI processing, analytics, communications, document processing and related platform services.
Where third-party providers are used, we take reasonable steps to work with providers that maintain appropriate security practices for the services they deliver.
When users connect external services, such as email accounts or authentication providers, those services may also process information under their own terms and privacy policies.
User responsibilities
Security is shared between Qascade and the people using the platform.
Users are responsible for:
- Keeping login details secure
- Enabling multi-factor authentication where appropriate
- Inviting only authorised team members
- Removing access when a person no longer requires it
- Reviewing information before relying on AI-generated outputs
- Ensuring uploaded documents are appropriate for the relevant workspace
- Using strong passwords and secure devices
- Notifying us promptly if they suspect unauthorised access
Incident response
If we become aware of a security incident affecting customer information, we will assess the issue, take steps to contain and remediate it, and notify affected users where required by law or where we consider notification appropriate.
Continuous improvement
Security is not a one-time exercise. As Qascade develops, we continue to improve how we protect customer data, manage access, monitor platform activity and support secure development workflows.
Contact
For security questions, concerns or suspected vulnerabilities, contact us at: