Compliance & data

Governed,
on the record.

Property investment moves real money and real personal data. OIKIA is built so that verification, retention and access control aren’t afterthoughts — they’re the structure everything else sits on.

How we handle data

Six commitments,
enforced by design.

01

KYC, AML & sanctions

Every participant is identity-verified and screened for sanctions and PEP exposure before capital moves. Results are recorded with a date and never bypassed.

02

UK GDPR by default

Personal data, ID documents and AML records are handled under UK GDPR — we store only what is needed, with clear retention periods and consent captured at first contact.

03

Six-year retention

Project records — contributions, payments, approvals and correspondence — are retained for at least six years, matching the record-keeping period in the Project Management Agreement.

04

Sensitive data as references

Bank details and payment credentials never sit in plain fields. We store an encrypted reference to the payment or accounting provider instead of the data itself.

05

Append-only audit trail

Every contribution, payment and approval is written to an immutable log. Payment approvals capture their signatories against defined authorisation thresholds.

06

UK data residency

The database and document storage sit in a UK region, keeping investor data and records within jurisdiction.

Access & separation of duties

Everyone sees
only their part.

Access is role-based and enforced at the data layer — never left to the interface. Sales, Compliance, Project Management, Finance and the Board each work within a defined boundary, keeping duties cleanly separated.

  • 01

    Sales / Onboarding

    Full access to contacts and leads; read-only on signed agreements.

  • 02

    Compliance / AML Officer

    Full access to KYC, AML and sanctions screening across all pillars.

  • 03

    Project Manager

    Full access to projects, agreements and tasks — for assigned projects only.

  • 04

    Finance

    Full access to payment and invoice records; read-only elsewhere.

  • 05

    Director / Board

    Full read access across all records; approval rights on reserved-matter payments.

In short

We store only what is needed, keep it in a UK region, reference sensitive details rather than holding them, and write every material action to an append-only audit trail — retained for at least six years.

Questions
on process?

Happy to walk you through how your data and capital are handled at each stage.

Get in touch →