Certifications

• SOC 2 Type II — audit in progress, target completion 2026 H2
• SOC 1 Type II — financial controls audit, target 2027 H1
• NACHA Operator Compliance — current
• PCI DSS — Level 4 attestation (tokenized; we don't store card data)
• GDPR — DPA available on request
• ADA / WCAG 2.1 AA accessibility for residents and applicants

Status & uptime

Live status: status.dwellport.com. SLA: 99.9% on Starter and Community, 99.95% on Enterprise. Smart access has its own SLA — gate-control reliability is measured separately and reported quarterly.

Sub-processors

• AWS (US-East, US-West) — primary hosting
• Stripe / Modern Treasury — payment rails
• Plaid — bank verification
• Sentry — error monitoring (PII-scrubbed)
• Customer.io — transactional email + SMS
• Plate Recognizer — optional ANPR backend

Security disclosures

• Security overview
• security.txt + PGP
• Pen test reports — available under NDA, contact sales
• ALPR retention policy — published in privacy notice