Your book, your custody

A broker weighing Primehold is being asked to keep client records on a platform whose founder runs a brokerage. That deserves a straight answer, not a badge wall. Here is who owns what, who can see what, and what happens when you leave.

Whose record is it?

The client's, always. A portfolio belongs to the property owner; a broker sees it because the client's firm link grants it, and that access is scoped server-side to the clients who granted it. Export is first-class: a client can take their full record out at any time, and erasure requests are honoured exactly as the privacy policy sets out.

Who can see my book?

Your firm, and nobody else's. Every query is scoped to your firm's granted client links at the database layer; there is no cross-firm visibility, no aggregate view across brokerages, and no analytics computed over another firm's records. Every change and every export is logged and attributed to the acting user, and the ledger itself is append-only: a changed figure is a new dated entry, never a silent overwrite.

The founder runs a brokerage. Why would a rival firm trust this?

Because the separation is structural, not a promise. Primehold App Ltd is a separate company from the founder's brokerage, with its own ICO registration (ZC178940). The brokerage holds a Primehold firm account like any other: the same scoping, the same audit trail, no privileged access, and no visibility of any other firm's book. Your clients remain your clients; the record they keep here is theirs, and it is the client who grants a firm access to it.

Where does the data live, and how does it travel?

In a database that lives outside the web root of the application server, reachable only by the application itself, held under UK GDPR. The roles match the privacy policy exactly: for portfolio records the property owner is the controller and Primehold is their processor; Primehold App Limited is the controller only for account and billing data. Traffic between your browser and Primehold is encrypted (TLS). Passwords are stored only as salted hashes; sessions are server-side and revocable. Card and payment details never touch Primehold's servers at all: billing runs end to end on Stripe.

What happens if I leave?

You take the record with you. While a subscription runs, any portfolio exports whole to a clean spreadsheet in the format lenders ask for, and a client's own export of their record keeps working regardless of their firm's status. There is no export fee and no lock-in tier. Your data is never the lock-in; the accumulated history is valuable only to you.