Organization boundaries
Membership checks and row-level policies separate organization records. Privileged server workflows repeat authorization checks.
Loading page…
Skip to contentThe details that keep
Simple for one.
A few useful
See the handoffs
Northstar / Product
Trust you can ask questions about
Clear permissions.Reviewable actions.
Sensitive rental work needs clear boundaries. Understand who is sharing information, who can act on it and which evidence supports the next step.
For independent landlords and property teams.
Access and evidence · illustrative preview
Access, with a purpose.
Different actions. Explicit access.Organization · Role · Request scope
Staff workspace accessMembership & role checks
Applicant verificationConsent to the request
Signing & paymentsSeparate required checks
Decision historyRecorded with context
Inspect the sample boundary
A verification invitation does not grant access to another applicant’s evidence or authorize a signature or payment. This illustration is a workflow explanation, not a live security assessment.
Review togetherPurpose, access, evidence and retention
Fictional data. Explore the homepage demo to try the connected workflow.
Make the boundaries part of the workflow.
Keep the work moving with clear ownership, recorded progress and an explicit next action.
- 01
Explain the request
Present the purpose, requested information and relevant privacy details before the applicant chooses whether to continue.
- 02
Limit access by context
Organization membership, staff roles and action-specific access checks govern the workspace and applicant requests.
- 03
Preserve the evidence
Keep consent, review decisions, documents and relevant financial events in their recorded context. Review sensitive actions through the existing authorization controls.
- 04
Handle privacy requests
Use the privacy workflow for access, correction, consent withdrawal and deletion requests, subject to applicable retention and legal-hold review.
What’s connected
The details that keep
the workflow together.
Action-specific access
Verification, signing and payment actions keep their own required checks. A link for one action does not grant the other capabilities.
Server-side provider credentials
Provider tokens stay on the server and are encrypted for storage. Applicant-facing pages do not receive stored bank-provider credentials.
Recorded decisions and controls
Consent records, review activity and relevant administrative and financial events support later inspection. Sensitive actions can require elevated authentication.
Canadian privacy context
PIPEDA and applicable provincial privacy requirements need to be assessed for the organization and its activities. Consent is one obligation alongside purpose, safeguards and accountability.
Provincial rules in context
Supported document and deposit-policy workflows use jurisdiction context. Confirm the current rule, available form and tenancy type before relying on a result.
Fit the way you work
Simple for one.
Connected for a team.
Start with essential information. Add shared ownership and review controls as your portfolio needs them.
For a solo landlord
Explain the information request, follow the applicant’s choice and keep the decision with its supporting evidence.
For an organization
Review staff roles, retention settings, provider arrangements and data-processing terms as part of your own security and privacy due diligence.
A few useful
distinctions.
Understand the workflow before bringing your own records.
Talk through your setupIs Northstar certified compliant with every Canadian requirement?
No certification or universal compliance guarantee is claimed here. Applicable federal/provincial requirements, configuration, provider contracts and your organization’s responsibilities need their own review.
Does this page guarantee Canadian-only storage?
No. Confirm hosting regions, subprocessors, provider transfers and contractual requirements for your implementation. Do not infer residency from Canadian branding.
Where can I review the legal and privacy information?
The privacy policy, data processing addendum and trust disclosure are linked below. Contact us to discuss your organization’s due-diligence requirements.
Privacy, due diligence & official guidance
Official guidance explains the applicable requirements. These links are reference material, not endorsements or certifications of Northstar.
See the handoffs
for yourself.
Try the fictional landlord-to-applicant journey on the homepage.