Your block's records, kept safe

How we protect your block

• Your money never passes through us

  Leaseholders pay your company's own bank account. RunYourBlock never holds, moves or controls your block's money, and never takes its fee out of service charges.

  We take no commission on insurance, contractors or anything else. The subscription is our only income from your block.

• At launch

  Sign-in that can't be guessed

  No passwords. People sign in with a one-time link or six-digit code sent to their email; the links are built so that email security scanners can't use them up.

  Directors also need a code from an authenticator app (two-step verification), with recovery codes in case a phone is lost. Repeated attempts are rate-limited.

• At launch

  Each person sees only what they should

  Directors, members, leaseholders, tenants and your accountant each get a role worked out from the company's records, and every screen and action checks one permission list.

• At launch

  A record nobody can quietly change

  Every change is written to an audit trail with who made it and when. Each entry is chained to the one before by a cryptographic hash, so any later edit or deletion shows.

  Stored files and the documents you issue are kept exactly as they were, with their fingerprint (hash) and gap-free reference numbers.

• At launch

  Notices served the valid way

  We record who has agreed to receive company notices by email and everyone's address for service. Lease notices go on paper unless the lease allows email.

• At launch

  Uploads checked, photos cleaned

  Uploaded files are checked for what they really are, not just their name, and location data is removed from photos before they're stored.

• UK hosting, backups and data protection

  Customer data will be hosted in the UK, with Amazon Web Services (UK, London region), encrypted in transit, with authenticator secrets encrypted at rest. Backups will be in place, and restoring them rehearsed, before any block's data goes in.

  When your company records people's details in RunYourBlock, your company is the data controller and Scoritz Limited processes the data for you under a data processing agreement (UK GDPR Article 28).

• Each block kept apart

  Every block's data will be separated in the database and checked on every request, so one block can never see another's.

• Leave any time with everything

  Export all your records and documents whenever you like, in standard formats. Not paying never blocks access to your records or an export.

• No tracking on this website

  This website sets no advertising or analytics cookies. The only cookie it uses remembers whether you chose light or dark mode.