Income Ally
Platform
What the product is, and what it costs
The product Overview Stay human. Stay compliant. The queue Built overnight, and it explains itself. Rules and thresholds Readable, and yours to change. The empathy agent It drafts for a person. It decides nothing. Former tenants The six-year clock, enforced not reported.
Commercial Pricing On the size of the book, not per seat. Security and data Isolation in the database, not a WHERE clause. About Who builds it, and the rules we write by.
See the whole platform →
Roles
Arrears software is bought by a committee
Finance and leadership CFO Can you break the arrears figure down? Chief Executive The regulator’s questions, answered first.
Income and service Head of Income A worklist that says why. Income Officer Without the cases that fix themselves. CX Director Nobody chased down a channel they cannot use.
Assurance and technical Regulatory Compliance Where the law says stop, it stops. IT & Data Lead Readable rules, a human in every decision.
All seven roles →
Answers
Arrears and the law, answered with the statute named
Holds and the clock Chasing former tenants Six years. What restarts it, and what doesn’t. Breathing Space Contact, interest and enforcement all stop. Mental health moratorium No 60-day cap, and usually no end date.
Possession and duties Pre-Action Protocol Judged when the claim is issued. Ground 8 It does not exist against a secure tenant. The equality duty Due regard, at the time, recorded.
Reporting and benefits Tenant Satisfaction Measures Which ones an income team moves. Universal Credit payments Managed payment and deduction are not the same.
Reference Glossary Twenty-two terms, statute named. Buyer’s guide Twelve questions for any vendor, us included.
All eight answers →
Legal spine
Every duty, and where it stops
What it does On screen, today Eight duties wired into what it will and won’t do. Evidenced, not certified It holds the record. A court decides if it is enough.
Where it stops What it does not do Nine of them, including a gap we would rather you read. Words you won’t find “Compliant”. “Approved”. “Guaranteed”.
Read the whole page →
Sign in →
Security and data

Isolation in the database, not in a WHERE clause

What follows is architecture, and it is checkable. It is not a list of certifications, and we have not dressed it up as one.

How it is built

Four things worth knowing

Tenant isolation is enforced below the application

Separation between landlords is PostgreSQL row-level security, tied to the session, rather than a filter the application has to remember to apply. An application bug cannot read past it, because the enforcement is not in the application.

Some records cannot be deleted at all

The equality impact assessment and the reasonable-adjustment records carry no DELETE grant. Not hidden in the interface — not granted in the database. A record that later becomes inconvenient cannot be quietly removed, by anybody.

The history is append-only

Actions, statutory holds, acknowledgements and automatic closures are recorded as dated events rather than as state that changes silently. Every one of them is something a person can be asked about.

No tenant-facing surface

Residents do not have accounts and do not see this product. That reduces the exposed surface considerably — and it is also a real limitation, which we say on the legal spine page: a product tenants cannot see cannot offer them a right to contest a decision.

What we are not claiming

Read this part first

No certification is claimed on this page

We are not listing standards, badges or accreditations here. If your review needs a specific one, ask us directly and you will get a straight answer about what does and does not exist rather than a logo.

Architecture is not assurance

Everything above is demonstrable in the product. It is not a substitute for your own security review, penetration testing evidence or data protection impact assessment.

It does not discharge your ADM duties

Keeping a human in every decision is a genuine safeguard. It is not the same as the specific automated decision-making obligations that sit with you as controller, and we do not present it as such.

Send us your security questionnaire

We would rather answer it early than at contract stage.

For the IT & Data Lead