Security and permissions · AIRA
Security and permissions: who sees what in AIRA
A brokerage CRM holds the two things a brokerage owns: its leads and its owner list. AIRA, the WhatsApp CRM for Dubai real estate, keeps every brokerage's data separate from every other brokerage, shows each person only the leads their role allows, and lets the owner take all of the data out at any time. This page sets out how, in plain terms.
Updated 17 October 2026 · by the AIRA team
How is one brokerage's data kept apart from another's?
Each brokerage is its own account, and every read and write AIRA makes is tied to that account. On top of that, the database connection itself carries a guard: any query on a brokerage's tables that does not name the brokerage is refused before it runs. A mistake in a query fails loudly with an error instead of quietly showing one brokerage another brokerage's rows.
AIRA's own platform administration account is kept out of brokerage CRMs as well. It is confined to the platform portal and cannot open a brokerage's leads.
Who sees what inside a brokerage?
Access follows the role each person has on the team page:
| Role | Leads they see | Can export |
|---|---|---|
| Agent | Their own leads, plus the unassigned pool any agent can claim | Their own leads |
| Manager | Their own leads and those of the agents who report to them | Their team's leads |
| Owner or admin | Every lead in the brokerage | Everything, as one file |
The same role rules apply on WhatsApp and in the web CRM. The team and settings pages are for owners, admins and managers. Broadcasts are limited to owner, admin and marketing roles. For how managers use their view, see real estate team management in Dubai.
How is landlord and owner contact data protected?
Owner names and numbers are the brokerage's most valuable list, so they have their own rules. An agent who needs an owner's number opens Owner data, finds the unit and presses Request. An admin approves it, and AIRA tells the agent as soon as they have. The list leaves only in ways someone chose and can see later.
Can we see who changed what?
Yes. Owners and admins have an audit log. It records who did what and when: lead status changes and deletions, team and settings changes, password resets and changes, RERA card updates and data exports, among others. When a number in a report looks wrong, the log shows how it got there.
Can we take our data with us?
Yes, at any time and without asking us. From Settings, an owner or admin can export the whole brokerage as Excel, CSV or JSON. Agents and managers can export the leads their role lets them see, and nothing more.
The owner can also permanently delete the account and all its data from Settings, by typing the brokerage name to confirm. Export first: deletion cannot be undone.
Where is the data stored, and is it used to train AI?
AIRA runs on Cloudflare, with the database and files stored in its APAC region. AIRA uses AI providers under business terms that forbid training on customer data. The full breakdown is on the compliance page, and the legal terms are in the privacy policy and data processing agreement.
Does AIRA message our clients?
No. AIRA talks only to your agents and managers, never to clients or landlords. Client conversations stay between your agents and their clients. For how agents use AIRA day to day, see the WhatsApp CRM for Dubai real estate.
New brokerages get 3 months free · No commitment · No card needed. Email hello@airauae.com with any security question, or to book a 10-minute demo.
Questions brokerages ask
- Can another brokerage see our leads?
- No. Every query is tied to your brokerage, and the database refuses any query on brokerage data that does not name one.
- Can an agent see other agents' leads?
- No. An agent sees their own leads and the unassigned pool. A manager sees their own team. Owners and admins see everything.
- Who can export our data?
- An owner or admin can export the whole brokerage as Excel, CSV or JSON. Agents and managers can export only the leads they can see.
- How do agents get a landlord's number?
- They request it from Owner data, and an admin approves it. The owner list is never open to everyone by default.
- Is there an audit log?
- Yes. Owners and admins can see who changed what and when, including status changes, deletions, settings changes and exports.
- Is our data used to train AI?
- No. AIRA uses AI providers under business terms that forbid training on customer data.