Authenticated identity
Users sign in through an OpenID Connect identity provider. The organisation a request acts for comes from the signed-in session, never from uploaded data.
Controls
Governance and security in the Collateral Monitor
Your portfolio data sits in its own tenant-private domain, apart from Panoperty's shared market data, and every reading records how and when it was produced.
Two domains, deliberately separated
Observations are measured around your collateral, so they are treated as your data and stay on the tenant side.
Tenant-private domain
- portfolio
- immutable snapshot
- exposures
- observation history
- monitoring conditions
Tenant records are never written into the shared domain.
Shared Panoperty domain
- market observations
- residential market activity
- measurement period
- source · provenance
Controls in the application
Tenant isolation
Every read and write of portfolio records, observations, conditions and exports is scoped to the signed-in organisation.
Immutable snapshots
Each tape becomes a snapshot keyed by portfolio, as-of date and file hash. Committed rows are never edited; a new tape makes a new snapshot.
Idempotent ingestion
Resubmitting a file returns the existing snapshot. Re-running a monitoring cycle does not duplicate what it already recorded.
Rejected rows and reconciliation
Rejected rows are kept with their reason. Row counts and exposure totals are reconciled before commit.
Fixed-precision money
Exposures and collateral values are stored as fixed-precision decimals to four places, so amounts are not subject to floating-point rounding.
Provenance and versioning
Each observation carries its window, the evidence behind it, its source and calculation version. Readings are appended, never overwritten.
Controlled exports
Only signed-in users can export, and an export contains only their organisation's records.
Deletion audit
Deleting a portfolio removes its snapshots and observations together, and the deletion is written to an audit log.
What we do not claim
This page describes controls built into the Collateral Monitor. It does not claim third-party security certification or regulatory approval.
This website does not collect portfolio data. A portfolio assessment starts with a conversation, and any data sharing is on terms agreed separately.
Review Panoperty's controls with your team
Bring your risk and security reviewers to a portfolio assessment to go through tenant isolation, provenance and data handling.