Security and Data Protection

At One2Rent, information security is a permanent commitment.

We know that the platform is used to manage relevant information about properties, contracts, documents, payments and communications between the parties. For this reason, we strive to adopt appropriate technical and organisational measures to protect the confidentiality, integrity and availability of the information entrusted by our users.

Security is seen as a continuous process of improvement and evolution.

Information protection is based on the following principles:

• data protection by design and by default — Privacy by Design and Privacy by Default;
• minimisation of data collection;
• access control based on permissions;
• use of secure connections;
• continuous platform monitoring;
• permanent updating of technological components;
• continuous improvement of security measures.

One2Rent seeks to implement mechanisms designed to protect personal data and other information stored on the platform against:

• unauthorised access;
• abusive use;
• improper alteration;
• accidental destruction;
• loss of information;
• unauthorised disclosure.

The measures adopted are reviewed and adjusted whenever necessary, following technological evolution and identified risks.

The platform uses authentication and authorisation mechanisms designed to ensure that each user only accesses the information for which they have authorisation.

Permissions are assigned according to the profile and the existing relationship between the users and the real estate assets managed through the platform.

Whenever possible, communications between users' devices and the platform are protected through secure and encrypted communication protocols.

Documents and other content uploaded by users are stored in technological infrastructures designed to provide high levels of availability, redundancy and security.

One2Rent uses specialised technological services to support features such as authentication, data and document storage, hosting and other essential components for the platform's operation. These services are selected taking into account reliability, security and compliance with applicable best practices. The technological architecture may evolve over time, seeking to maintain high standards of information protection.

Some platform features may use Artificial Intelligence technologies to support tasks such as:

• contract reading;
• information extraction;
• documental organisation;
• process automation.

Whenever these features are used, One2Rent seeks to limit information processing to what is strictly necessary to execute the service requested by the user.

One2Rent's security evolves continuously.

As the platform grows, new measures may be implemented, namely:

• multi-factor authentication — MFA;
• logging of relevant activities;
• automatic detection of anomalous behaviour;
• additional mechanisms for protection against improper access;
• reinforcement of security audits;
• other technical improvements considered appropriate.

Security is a shared responsibility.

Each user should contribute to the protection of their account, adopting best practices, namely:

• use strong passwords;
• keep credentials confidential;
• sign out of public or shared devices;
• report any suspicious use of the account;
• keep your devices updated.

If any security vulnerability or unexpected behaviour of the platform is identified, One2Rent appreciates that this information be communicated through the contacts provided.

All reports received will be analysed as soon as possible.

Absolute security cannot be guaranteed in any technological system.

Nevertheless, One2Rent commits to acting diligently in the prevention, detection and mitigation of security incidents, seeking to adopt measures proportional to the identified risks and the evolution of industry best practices.

For questions related to information security or data protection, you may contact:

Emanuel Sousa

Portugal

E-mail: geral@one2rent.pt