Authenticated access
Tenant, lease, payment, document, and staff records are served only through authenticated TMS workflows with permission checks.
Trust
Security
Public information and private rental operations are kept separate.
Public-site isolation
The Kirayas.com domain uses a public-only URL configuration and does not expose internal application routes.
Form protection
Contact submissions use CSRF protection, server-side validation, escaped templates, and a fixed WhatsApp destination.
Responsible access
Customers should use individual accounts, strong passwords, appropriate roles, and timely access removal.