Oracle NetSuite
is the system of record for core property and financial data.
Integrations · Cloud Infrastructure
Cloud-based, with a clear boundary
RIOO is cloud-based, built natively on Oracle NetSuite and connected with AWS services where needed. Core property and financial records live in NetSuite. Supporting services run around them. Confirmexactly what RIOO uses AWS for (e.g. document/media storage, portal hosting, integration services) before publishing specifics
Cloud & infrastructureRecords stay in NetSuite
- OrOracle NetSuiteSystem of recordConnected
- AWAWSFile storageConnected
- GoGoogle WorkspaceSign-in & docsConnected
Why infrastructure questions matter
NetSuite teams and security reviewers want to know where data lives, how it moves and who's responsible for what. A clear answer is part of a good architecture. RIOO's answer starts with the core: property, unit, tenant, lease and financial records reside in your NetSuite account. Anything outside that core is a supporting service with a defined purpose.
Capabilities
How RIOO uses the cloud
Learn more about Built on NetSuite
AWS
is listed in RIOO's integrations directory. Confirmservices and purposes (storage, hosting, compute) and data residency regions
Cloud access
from any device, with role-based permissions.
Capabilities
What this means for you
No servers to run
RIOO is delivered as a cloud service.
Continuous updates
without on-premises upgrades.
Access anywhere
for office, field and residents.
A defined data boundary
for security review.
Security and data protection
RIOO applies role-based access so each user sees only the properties and data their role requires, and records workflow activity in an audit trail. NetSuite provides platform-level security controls for data held in your account. Confirmsecurity certifications (e.g. SOC 2), encryption, data residency and incident response commitments before publishing; do not imply certifications not held
How it works
For your security review
We can walk your team through:
Confirmavailability of a security overview document / questionnaire responses
- 01
Which records live in NetSuite.
- 02
Which supporting services RIOO uses and why.
- 03
How data moves between them.
- 04
Access controls, logging and responsibilities.
Where does RIOO data live?
RIOO's core property and financial data lives in your Oracle NetSuite account: properties, units, tenants, leases, charges, payments, vendor bills and journal entries. Supporting cloud services, including AWS listed in RIOO's integrations directory, handle defined tasks around that core rather than holding a second copy of your ledger. ConfirmAWS services used and data held
That distinction is the starting point for most IT reviews. In a typical standalone property system, the vendor hosts a full database of leases and transactions and syncs summaries to the ERP. With RIOO, the authoritative records sit in the NetSuite account your organisation already licenses, administers and has assessed, which narrows the scope of what a security team needs to review.
Compare
Which data sits where?
Most RIOO data sits in NetSuite: leases, tenants, charges, payments and journal entries are NetSuite records under your roles. Card data stays with the payment gateway, message delivery logs stay with the messaging provider, and supporting services hold only what their task requires. The table below summarises each data category and who controls access.
Confirmcomplete data map before publishing
| Data category | Where it lives | Who controls access |
|---|---|---|
| Properties, units, leases | NetSuite account | Your NetSuite roles |
| Charges, payments, GL entries | NetSuite account | Your NetSuite roles |
| Tenant and vendor contacts | NetSuite account | Your NetSuite roles |
| Documents and photos | ConfirmNetSuite File Cabinet or AWS storage | Role-based permissions |
| Card data | Payment gateway, never stored in RIOO | Gateway provider |
| Messages sent | Messaging provider logs, with a record in RIOO | Provider and your roles |
In detail
Reliability and continuity, layer by layer
Availability of a NetSuite-native platform depends on several layers. Understanding who owns each helps when planning continuity.
NetSuite platform
Oracle operates the infrastructure, publishes service status and ships two major releases a year.
01
RIOO application
RIOO maintains its application against supported NetSuite releases. Confirmrelease testing process
02
Supporting services
Cloud services used by RIOO, such as AWS, follow their providers' availability commitments. Confirm
03
Third-party integrations
Payment, messaging and signature providers each have their own status pages and support routes.
04
Your configuration
Custom scripts, workflows and roles in your account are tested in sandbox before each release.
05
Why the native core simplifies this
When core property and financial records live in NetSuite, much of the security review relies on controls your organization has already assessed for NetSuite. The remaining questions focus on the supporting services around the core, which is a smaller, clearer scope than reviewing a second complete property database and the connector between them.
Use cases
How should IT teams assess a NetSuite-native property platform?
A NetSuite-native platform changes the shape of a security assessment. Instead of reviewing a second complete system, IT teams focus on four narrower questions.
The NetSuite account itself
Your existing NetSuite controls, roles, sign-in policy and audit settings already apply to RIOO records.
The supporting services
Which cloud services RIOO uses, which fields each receives, and why.
The connectors
How data moves between NetSuite and each service, how it is authenticated and how failures surface.
Shared responsibilities
Which controls belong to Oracle, to RIOO, to each provider and to your administrators.
How it works
Questions your security team will ask
Security reviews for property software usually cover the same ground. We recommend asking every vendor, including us:
- 01
Data location
Where does each category of data live: core records, documents, media and logs?
- 02
Data flows
Which external services receive data, which fields, and why?
- 03
Access control
How are roles defined, how is access scoped by property, and how is it reviewed?
- 04
Authentication
What sign-in methods are supported, including single sign-on and multi-factor authentication? Confirm
- 05
Logging and audit
Which actions are logged, for how long, and who can see the logs?
- 06
Encryption
In transit and at rest. Confirm
- 07
Incident response
How are incidents detected, communicated and resolved? Confirm
- 08
Sub-processors
Which third parties process data on the vendor's behalf? Confirm
- 09
Certifications and assessments
Which are held, by whom and with what scope? Confirm
In detail
Data residency considerations across markets
Data residency for RIOO follows where your NetSuite account is hosted, which Oracle determines by data centre region, plus the regions used by any supporting services. Operators in the UK, Australia, Singapore and the UAE should confirm both before go-live, especially where local privacy rules restrict cross-border transfers of tenant data. ConfirmAWS regions used
UK and EU tenants
UK GDPR treats tenant contact and payment data as personal data; transfers outside the UK need an adequacy decision or safeguards.
Australia
The Privacy Act requires reasonable steps before disclosing personal information overseas.
Singapore
The PDPA's transfer limitation obligation requires comparable protection for data sent abroad.
UAE
The federal PDPL and free-zone regimes such as DIFC set conditions for cross-border transfer.
Who is RIOO's cloud model NOT for?
RIOO's cloud model is not for organisations that require property software to run on their own servers or in a private data centre. RIOO is delivered as a cloud service on NetSuite, so on-premises deployment, air-gapped environments and customer-managed database hosting are outside its scope.
It is also not suited to teams that want to avoid NetSuite altogether. Because core records live in NetSuite, a NetSuite licence and someone responsible for administering it are prerequisites. Organisations standardised on another ERP should evaluate whether a move to NetSuite is part of their plan before shortlisting RIOO.
What changes
What changes when cloud infrastructure runs on NetSuite?
When cloud infrastructure runs on NetSuite through RIOO, operational work and accounting stop being two separate jobs. Transactions post to the general ledger as they happen, reports use the same records as daily work, and controls come from NetSuite roles and approvals. The changes below are the ones teams usually notice first.
- A clear architecturefor IT and security teams.
- Cloud conveniencewithout a second core database.
- Confidencein where your records live.
Checklist
Security review preparation checklist
- Confirm your NetSuite account's data centre region and current role design.
- Request RIOO's data map of supporting services and the fields each receives.
- Review sign-in policy for RIOO users, including multi-factor authentication in NetSuite.
- List the third-party providers you will connect, such as payment and messaging services.
- Agree who reviews user access, and how often, for property-scoped roles.
- Plan sandbox testing for each NetSuite release.
Talk to a specialist
See cloud infrastructure on your own portfolio.
Supporting services run around them.
Is RIOO cloud-based?
Yes. RIOO is delivered as a cloud platform built natively on Oracle NetSuite, so there are no servers to install, patch or back up. Users work in a browser or on mobile, updates arrive without on-premises upgrades, and core property and financial records stay in the NetSuite account your organisation already licenses.
Where do core records live?
In your NetSuite account. Properties, units, tenants, leases, charges, payments, vendor bills and journal entries are NetSuite records, governed by your NetSuite roles, sign-in policy and audit settings. Supporting services connected to RIOO handle defined tasks, such as messaging or payments, without holding a second copy of your ledger.
What does RIOO use AWS for?
AWS appears in RIOO's integrations directory as a supporting cloud service alongside the NetSuite core. Its role is limited to defined functions around the core, and RIOO can provide a data map showing which services are used, which fields they receive and in which regions, for your security review. ConfirmAWS services used, purposes and regions
Which security certifications does RIOO hold?
Ask RIOO for its current security documentation during evaluation, including any certifications, assessments and their scope. Oracle publishes the certifications that cover the NetSuite platform where your core records live, which addresses much of a typical review. RIOO does not claim certifications it does not hold. ConfirmRIOO certifications, if any
Does RIOO keep a separate copy of our ledger outside NetSuite?
No. Rent charges, receipts, vendor bills and journal entries are NetSuite transactions in your account, and reports read them directly. RIOO does not maintain a parallel accounting database that has to be reconciled back to the ERP. Supporting services handle defined tasks such as documents or messaging. Confirmany cached or replicated data
Can we use single sign-on for RIOO users?
RIOO users sign in through NetSuite, so the sign-in options your NetSuite account supports, such as SAML single sign-on and two-factor authentication, apply to them as well. Your administrator manages these centrally with the rest of your NetSuite security settings. Portal users for tenants may sign in separately. Confirmportal authentication options
Related
Related to cloud infrastructure
