Addresses to allow
All traffic is HTTPS on port 443. No other ports, no browser extensions, no downloads to run.
| Address | Used for | Needed |
|---|---|---|
truelot.ca | Company website, policies | Yes |
app.truelot.ca | The truelot app and client dashboards | Yes |
login.microsoftonline.com, login.live.com | Sign in with a Microsoft account | If staff sign in with Microsoft |
accounts.google.com | Sign in with a Google account | If staff sign in with Google |
cdnjs.cloudflare.com, cdn.jsdelivr.net | Open-source libraries the dashboard loads (charts, maps, PDF, Excel and PowerPoint export) | Yes, for dashboards |
fonts.googleapis.com, fonts.gstatic.com | Web fonts | Recommended |
Suggested category: Business / Real Estate. Email from truelot comes from @truelot.ca addresses; please allow it through your mail filter.
Security at a glance
Sign-in
Staff sign in with their own work Microsoft or Google account. truelot never sees or stores passwords. Onboarding pages open with a one-time client code.
Hosting
Hosted on Cloudflare. Data is encrypted in transit (TLS) and at rest. Documents are read with AI (Anthropic) under terms that bar training on them, and a person checks every output.
Access control
Access is set per company and per person by role, country, property type and type of information, and every change is logged.
Your documents
Clients can keep documents in their own SharePoint or OneDrive and connect with their own sign-in.
For a security questionnaire, our data security answers, or our Privacy Policy, contact us below or see truelot.ca/privacy.
Contact
Samih Hachem, samih@truelot.ca. Security reports: see security.txt.