Engineering built for statutory precision.
iPO Hub is not a database with a UI. It is an event-sourced, hash-chained compliance engine running at the edge — designed from first principles around UK landlord statutory obligations.
Five architectural pillars
Every design decision in iPO Hub traces back to one of five foundational principles.
Event Sourcing
The system of record is an append-only event store. Every state change — tenancy created, certificate renewed, notice issued — is an immutable event. Current state is derived by replaying events, never by mutating records.
Enables full audit history, temporal queries, and event replay for compliance verification.
SHA-256 Hash Chaining
Each event entry is SHA-256 hashed and references the hash of the previous entry. This creates a cryptographic chain where any retroactive modification is mathematically detectable.
CPR Part 39 compliant. Court-admissible evidence bundles generated automatically.
Edge-First Runtime
All compute runs at the network edge — no origin server, no cold starts, no single point of failure. Strict sandboxing provides sub-millisecond startup with full process isolation.
Global distribution, 99.9%+ availability, DDoS-resistant by architecture.
Direct Rail Invariant
Rent flows directly from tenant to landlord via standing order. iPO Hub has zero custody of rental income — this is an architectural invariant enforced at the data model level, not a policy.
Eliminates misappropriation risk. No client money protection insurance required.
Statutory Alignment Engine
Compliance obligations are modelled as first-class domain objects with statutory references, deadlines, and penalty schedules. The engine continuously evaluates portfolio state against statutory requirements.
Covers 12+ UK statutes. Automatically generates notices, reminders, and evidence bundles.
Zero-Trust Security
No passwords. No VPN. Passkey (WebAuthn FIDO2) and magic-link authentication. Role-based access control with principle of least privilege. Every access event is logged.
Phishing-resistant. No password database to breach. Hardware key MFA for admin access.
Platform capabilities
Every layer of the iPO Hub platform is purpose-built for compliance precision, resilience, and statutory alignment.
Frontend
Global edge delivery
Server-rendered pages delivered from the edge. Sub-100ms time-to-first-byte globally with no origin server latency.
Compute
Edge-native compute — sub-millisecond cold starts
All business logic runs in isolated, sandboxed compute units at the network edge. Zero cold-start latency. No shared infrastructure.
Event Store
Distributed relational database
Append-only event log with SHA-256 hash chaining. Read models projected from events. Fully consistent within each entity boundary.
Document Storage
Geo-redundant object storage
Compliance certificates, tenancy agreements, and evidence bundles stored with zero-egress redundancy. Signed URL access only.
Auth
Passkey-first, phishing-resistant authentication
Hardware-bound passkeys and email magic-links. No passwords stored. Session tokens in HttpOnly cookies with strict SameSite policy.
Transactional compliance notifications
Magic links, compliance alerts, and statutory notices delivered with DKIM/SPF/DMARC enforcement.
Observability
Real-time platform monitoring — no sampling
Real-time metrics, error tracking, and performance monitoring. No third-party analytics SDKs or data sharing.
Statutory reference framework
Every compliance obligation in iPO Hub is mapped to its statutory source. The engine evaluates portfolio state against these obligations continuously.
Housing Act 1988
Assured tenancies, Section 21, Section 8
Landlord and Tenant Act 1985
Repair obligations, fitness for habitation
Deregulation Act 2015
Section 21 prescribed requirements
Housing and Planning Act 2016
Banning orders, database of rogue landlords
Homes (Fitness for Human Habitation) Act 2018
HHSRS, damp & mould standards
Tenant Fees Act 2019
Permitted payments, prohibited fees
Renters' Rights Act 2025
Abolition of Section 21, periodic tenancies
Awaab's Law (Social Housing Act 2023)
14-day damp & mould remediation
Finance Act 2015 (Section 24)
Mortgage interest restriction
Gas Safety (Installation and Use) Regulations 1998
Annual CP12 requirement
Electrical Safety Standards Regulations 2020
5-year EICR requirement
Energy Performance of Buildings Regulations 2012
EPC minimum E rating
GRC risk shielding
Governance, Risk & Compliance is not a dashboard — it is a continuous evaluation loop. iPO Hub runs GRC checks on every portfolio event.
Continuous Compliance Monitoring
The compliance engine evaluates every property against all applicable statutory obligations on every event. No manual checks required.
- Certificate expiry tracking
- Notice deadline monitoring
- Repair SLA enforcement
- Licence renewal alerts
Automated Evidence Generation
CPR Part 39 compliant evidence bundles are generated automatically for every compliance event. Ready for tribunal or court proceedings.
- SHA-256 hash-chained entries
- Timestamped event records
- Document version history
- Contractor sign-off records
Penalty Exposure Elimination
By automating every statutory obligation, iPO Hub eliminates the primary causes of landlord fines, rent repayment orders, and tribunal awards.
- £0 target penalty exposure
- Proactive deadline alerts
- Automated notice generation
- Compliance status dashboard
Audit-Ready at All Times
Every action, every document, every notice is recorded in the immutable ledger. Council inspections, tribunal proceedings, and HMRC enquiries — always ready.
- Immutable audit trail
- Document chain of custody
- Statutory notice archive
- Inspector-ready reports