Your data, your cloud, your keys.
Every Insights environment has its own database, hosted in your cloud — Azure, AWS or on-premises — so encryption at rest follows your settings, under your control. People sign in with Microsoft Entra ID or an Insights account, changes are recorded on an append-only audit log, and an AI agent gets exactly the access of the person who connected it. Nothing more.
We run the app. Your database stays in your cloud.
The Insights application runs on Microsoft Azure. Each customer environment has its own database, hosted in the customer’s own cloud — Azure, AWS or on-premises — and the app works against it.
Underneath is the RealTime™ engine, the rules and calculation layer that has been in production for more than ten years: it recalculates the occupancy forecast, locks figures at close and checks that the sums agree. Insights AI and the MCP server sit alongside, and an AI agent works with exactly the access of the person who connected it.
One database per environment
Your environment’s data lives in its own database — not beside anyone else’s — hosted where you choose: Azure, AWS or on-premises.
Encryption on your terms
Because you host the database, encryption at rest is governed by your database settings and stays under your control. Data is encrypted in transit.
SOC 2-aligned controls
We build and run Insights with controls aligned to SOC 2 practices. Bring your questions to the security review — we’ll walk through them.
Only the people you add. Only what they need.
People sign in with Microsoft Entra ID single sign-on or an Insights account, with no auto-provisioning: signing in doesn’t create an account — an administrator adds each person first. Sessions last 8 hours. From there, role-based access decides what each person sees and does.
- Portfolio and asset access, with Deny to carve out exceptions.
- Section and process access on top — which parts of the report a person works on, and which steps they take part in.
- A persona sets the starting point: section access, how Insights AI frames its answers, the default Home.
| Person | Persona | Access |
|---|---|---|
| Pat Lee | Property Manager | Asset · Westbridge Tower |
| J. Moreno | Asset Manager | Portfolio · Canada Core |
| Maria Lin | Director of PM | Portfolio · Canada Core Deny · Harbour Pointe |
| Sam Okafor | Investor | Portfolio · Canada Core Read-only |
An audit log that only grows.
Insights keeps an append-only audit log for 7 years. Each entry records who did what and when, with the IP address and user agent it came from — including every write an AI agent makes on someone’s behalf.
- Append-only — entries are added, never edited.
- Kept 7 years, with IP address and user agent on each one.
- Agent writes included — every one of them is logged.
| When | Event | IP · user agent |
|---|---|---|
| Oct 16 09:42 | Pat Lee · action note saved · Replace lobby doors | 203.0.113.24 · iPhone app |
| Oct 16 09:15 | J. Moreno · section approved · Crown Plaza, Financial | 198.51.100.7 · Edge, Windows |
| Oct 16 08:58 | Agent for Maria Lin · action flagged for deletion | 203.0.113.90 · MCP client |
| Oct 15 17:31 | Sam Okafor · signed in · Entra ID | 198.51.100.42 · Safari, macOS |
An agent can’t do more than the person who connected it.
Insights AI runs on Anthropic’s Claude models, and an environment can bring its own Anthropic key. Outside AI — Claude, ChatGPT, Gemini, Microsoft Copilot, Cursor — connects through the Insights MCP server, under rules that don’t bend.
- Exactly the user’s access — an agent sees and does what its person can, and nothing else.
- Writes off by default — an administrator switches them on, or they stay off.
- No deletes — an agent can only flag an action for a person to delete.
- Every write audit-logged, on the same 7-year log as everyone else.
- OAuth 2.1 with PKCE and dynamic client registration — 30-minute access tokens, rotating 30-day refresh tokens.
The seven write tools, all off until an admin enables them:
create_actionupdate_actionupdate_action_noteflag_action_for_deletionpropose_review_itemwrite_commentarywrite_commentary_batchThe same rules, in your pocket.
The iPhone app follows your Insights access exactly — and adds a few rules of its own, because phones get left on tables.
App Lock
Face ID, Touch ID or your passcode before anything shows.
Nothing on the lock screen
Notifications never carry a figure, a property name or a note.
No ads, no third-party analytics
The app doesn’t carry advertising or third-party analytics.
Sign out, wiped
Signing out removes saved data, waiting changes and downloaded reports from the phone.
Photos without location
Inspection photos are stripped of location before they leave the phone.
Same access as the web
The app sees exactly what your Insights access allows — no wider.
The controls, where they show up.
Walk your security team through it.
We’ll cover where the database lives, Entra ID sign-in, access levels, the audit log — and exactly what an AI agent can and can’t do.