Security and data
Title papers, IDs and payment records, handled narrowly
DeedLens holds the documents behind property deals, so access is narrow by design: business accounts only, one company per workspace, and every action recorded.
At a glance
- Hosting
- Built to run on Microsoft Azure in South Africa North, the closest Azure region to Nigeria
- Your documents
- You are the controller; DeedLens processes them for you
- Raw files
- Deleted 12 months after a matter closes, unless you set longer
- Audit log
- Each event chained to the one before it
- Model training
- Never on your documents without your written opt in
Where it runs
Built to run on Microsoft Azure in South Africa North, the closest Azure region to Nigeria.
- The design keeps original files and page images in Azure Blob Storage, versioned and encrypted at rest.
- Keys and secrets sit in Azure Key Vault, reached through managed identities, and traffic is encrypted in transit.
Your documents
Your documents stay yours
- DeedLens processes your documents only on your instructions, under a data processing agreement that every customer signs. Your company stays the controller.
- Originals are never altered. Every file is hashed with SHA256 when it arrives, so a later swap is visible, and a replaced document keeps both versions.
- Raw files (the originals, the page images and the text read from them) are deleted 12 months after a matter closes, unless you set a longer period. The findings, the review and the reports stay, so the matter can still be explained.
- An owner can delete a matter and everything on it at any time. A deleted file can be restored for about 30 days in case of a mistake, then it is gone for good. Database backups are kept for 14 days.
- Your documents are never used to train models without your written opt in.
Who sees what
One company per workspace
- Every record belongs to one company, and one company can never read another company's matter.
- Your owner invites your people and gives each a role: owner, agent, lawyer reviewer or viewer. Owners, agents and lawyer reviewers confirm or dismiss findings and sign off a matter; viewers only read; only owners manage users.
- A matter can be kept to the people you name, its reviewer and your owners. Everyone else in your workspace sees nothing of it.
- Someone you remove loses access at once. Their name stays on the work they did.
- A report can be shared only after the matter is signed off and that version of the report is approved. The report names who reviewed it and says whether that was a lawyer. Private links expire and can be withdrawn.
- Seller and developer upload links reach only the request they were made for.
On the record
Every change is recorded
- The audit log records who did what and when, with the record before and after the change, and every sign in.
- Each event carries a fingerprint of itself and of the event before it, so an event changed or removed afterwards shows when an owner checks the log.
- Owners export the audit log for their own files and for inspections.
- Findings name the rule and version that raised them, so a report can be traced back to the rulebook as it stood.
NDPA 2023
Data protection under the Nigeria Data Protection Act
The privacy notice sets this out in full.
- DeedLens is a processor for customer documents and a controller for its own account data.
- Every customer signs a data processing agreement.
- A personal data breach that puts people at risk goes to the Nigeria Data Protection Commission within 72 hours, and affected customers hear without undue delay.
- Hosting outside Nigeria relies on the transfer safeguards in Part VIII of the Act, such as standard contractual clauses.
Closed by design
Hard to probe
- Accounts open only for registered businesses, after a demo or pilot request and a CAC check. No account opens without that check, and the company's CAC number is recorded with its workspace.
- Public forms and links are limited per visitor address.
- Models only read pages, and anything they read must quote the page it came from. Rules, not models, decide every finding.
- Integrity findings use neutral words and never explain how a signal was detected.
Next step
Talk to us about your data
Book a demo to walk through roles, retention and sharing with your own compliance questions in hand.