Last reviewed June 2026
Security
How the bureau holds building data and runs the operating layer it commissions into a building.
Building data belongs to the building
Operating data is held under the engagement that produced it and stays with the building. Access is least-privilege — limited to the bureau and the people each building authorizes.
The operating layer
What we commission is infrastructure the building owns. It survives an operator changing and a vendor leaving, because it belongs to the building, not to whoever installed it.
How it is protected
Data is encrypted in transit and at rest on hardened EU infrastructure. Access is authenticated and role-based throughout, and the bureau's internal instrument is not publicly listed or indexed by search engines.
Reporting a concern
If you believe you have found a vulnerability, write to security@aparee.com. We will acknowledge it and keep you informed while it is resolved. Please give us a reasonable opportunity to address it before disclosing it publicly.
Contact
Security questions can be sent to security@aparee.com.