Locarë
Security

Your data is yours — and no one else can reach it.

Each client truly separated, a password only you know, and money that never passes through us. Security not as a promise, but as the way the system was built.

The foundation of everything

Each client's data stays separate — for real

One agency never sees another's data. And that separation doesn't depend on the program remembering to filter each screen: it's enforced at the deepest point of the system, the database itself.

In practice, what this means for you: even if one day a programming bug slips through, it can't show one client's data to another. The door simply doesn't open.

And there's a rule that runs through everything: the more data a path can reach, the fewer things it can do with it.

Just to log in
Reaches
Recognize your account at login
Can
Check your password and nothing more — it doesn't see your contracts, it doesn't touch any data.
Your day to day
Reaches
Only your portfolio
Can
Everything your operation needs — inside your agency, never in another's.
Maintenance
Reaches
Reserved for our technical team
Can
Only platform operation tasks, all logged — never a door to snoop on data.

To make sure that separation never fails, the system is checked by more than 1,100 automated tests on every change — and some of them try on purpose to reach one client's data through another's account. If any succeeds, the change doesn't ship.

Real privacy

Not even we see your password

Your security doesn't depend on trusting our goodwill — it depends on how the system was built.

You create your own password
Your account is born without a password. You set yours through a secure link that expires quickly. We never get to know what it is.
Two independent locks
We don't know the manager's password; the manager doesn't know the tenant's. One doesn't open the other.
Support only with your permission
To help you with a setting, we need you to grant access — for a limited time and only to that. Never to your data, never to your keys. Everything is logged.
The agreement stays on record
The terms you accept are stored exactly as they were at the moment of acceptance. Nothing changes behind the scenes.
Your team

Everyone sees only what they need

You build your team with ready-made roles — administrator, manager, finance, broker, agent, inspector or read-only — and each one sees only the part of the system their job requires. The broker doesn't need to see finance; the inspector doesn't touch contracts. So no one stumbles into what isn't their job.

Under the hood

Protection, vault and independence

Everything travels protected
All communication with Locarë is encrypted (the same padlock as banks). And your password is stored scrambled — not even we can read it.
Sensitive data kept in a vault
ID numbers and your account keys are encrypted. Even someone looking inside the database would see only scrambled data, not the information.
The accounts are yours
Receiving money and storing files use your own accounts, at the provider you prefer. Money goes straight to your account and files stay in yours — we're not in the middle.
A backup that is yours
Anytime you download a copy of your data, encrypted with a password only you hold. And you can restore just one item — a property, a contract — without touching the rest.
Where everything lives

The infrastructure map

Each piece in its place — and the distinction that matters: the dashed spheres are your accounts, at the providers you choose. Money, files and email never live on the platform; every exchange between the pieces is protected.

encrypted connectionpublic site1×/dayencrypted · separated by clientencrypted keyyour keyonly what you grantLocarëthe applicationYou & clientsbrowser · portalsCloudflaresite · domain · emailDaily tasksautomated routineDatabaseNeon · separated by clientPaymentyour account (e.g. Asaas)Filesyour account (photos, docs)GoogleGmail · Drive — your accountplatform infrastructureyour accounts, at the provider you choose
Locarë
The application itself — app.locareapp.com. It's the only piece that talks to all the others, always over an encrypted connection.
Database
Where the data lives (in a managed database, Neon), separated by client at the deepest point: each manager reaches only their own information.
Cloudflare
Serves this site, handles the domain and forwards email — it doesn't touch the platform's data.
Daily tasks
Once a day, the billing, notices and backup routines fire on their own — one trigger a day, with no access to your data.
Payment provideryour account
YOUR account (e.g. Asaas or Mercado Pago). Money goes straight into it; we store only your access key, encrypted.
Filesyour account
YOUR account (e.g. Cloudinary or Amazon S3). Photos and documents live there; the platform stores only the reference, not the file.
Googleyour account
YOUR account, connected only to what you authorize: sending email via Gmail and saving backups to Drive.

Compliant with data protection law

Data processing follows data protection law. The data you enter about tenants and contracts is yours — we only process it on your behalf, according to your instructions. The details are in our Privacy Policy.