Request a private demo

Security and privacy

A family’s information is among the most sensitive there is. This page sets out the measures Manor Office has in place today. Where something is not in place yet, it is not on this page.

We complete security questionnaires and provide our security and privacy documentation under NDA. Request our security pack.

Hosting and data residency

Manor Office runs on Google Cloud in Frankfurt, Germany, in the European Union. The servers, the database that holds your records and the file storage that holds your documents are all in that region.

If you use the property map, property addresses are looked up with Google Maps to place them on the map, and the map is drawn by Google Maps in your browser.

Encryption

Every connection to Manor Office uses TLS, so information is encrypted on its way between your device and our servers. Stored data, including documents, is encrypted at rest with AES-256 by the cloud platform.

Access control and authentication

  • By invitation only. There is no public sign-up. Every person is invited individually by your office, so you decide exactly who has an account.
  • Two-factor sign-in. Signing in takes a password and a second step: a code from an authenticator app (TOTP) or a one-time code sent by email. A password on its own is not enough. After repeated failed attempts the account is locked.
  • Role-based access. Each person sees only what their role allows. A staff manager, an external adviser and the principal can be given quite different views, and access can be read-only.
  • Support access. Manor Office support can sign in as a person in your office for up to one hour, through a one-time link confirmed with a fresh code. Each such session is recorded in your activity log and your office’s owners are told by email. Security settings, people and data downloads stay closed during it.

Logging and audit trail

Every sign-in, successful or not, every change to a record, every file opened or downloaded and every data export is logged with who did it and when. Changes to people, roles and settings are logged too. Your office’s owners can review the log at any time in Manor Office, and it is included in the data export.

Backups and recovery

Your records are backed up every day, with each daily backup kept for 14 days, and every week, with each weekly backup kept for 14 weeks. We can also bring the records back to how they were at any minute of the last 7 days. Backups are kept by Google Cloud in Frankfurt, in the same region as the database.

A restore goes into a separate copy first, so it never overwrites your live data before it has been checked. We have tested this: a restore drill on 25 October 2026 brought back every record. A deleted document file can be recovered for 30 days.

AI and your data

  • AI runs on Google Cloud infrastructure in the European Union.
  • Your data is never used to train AI models.
  • The AI sees only what your office gives it. It prepares records, summaries and suggestions, and every suggestion needs a decision by a person before anything is saved, sent, signed, paid or moved.
  • Key values the AI extracts from a document are shown with the passage they came from, so they can be checked.
  • When bank statements are read, account numbers are not stored.

Subprocessors

Google Cloud provides our hosting, database and file storage.

Data ownership and exit

The information belongs to the family. It is held for you, and for no other purpose. Your office’s owners can download their records at any time, as CSV and JSON: properties, contracts, staff, expenses, entities, bank accounts, statements, documents and reminders, with the people, settings, activity log and the original documents. When you leave, we prepare a complete export for you.

When you leave, your data is deleted after you have received your export.

Privacy law

Manor Office is built to comply with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (revFADP). A Data Processing Agreement is available on request. For how this website itself handles personal data, see the privacy policy.

Certifications and due diligence

Our infrastructure provider, Google Cloud, is independently audited to ISO/IEC 27001 and SOC 2. Manor Office itself is not yet certified.

We complete security questionnaires and provide our security and privacy documentation under NDA. Request our security pack or write to support@manoroffice.com.