One guarded door to the data
Only a private gateway, unreachable from the internet, can talk to the database. Websites and apps can only ask it to run a fixed list of named actions, and each request is signed and checked against that list.
Security
Zero trust, by design
A gate system knows who lives where and who comes to visit. We built Gatematix so that no single component — not even our own website or apps — is trusted with more than it needs.
- Apps and websitesHold no database passwords and no signing keys
- Protected edgeOnly verified traffic reaches our servers
- Private gatewayChecks every request against an allowlist
- Your neighborhood’s databaseSeparate for every community
One database per neighborhood
Each community’s houses, residents, passes and payments live in their own database. A neighborhood’s data is never mixed with another’s.
Sessions tied to your device
The apps never contain secret keys. Each session is bound to the phone it was opened on; tokens are stored only as fingerprints, rotate on use, and reusing an old one ends the whole session.
Passwords done right
Passwords are hashed with Argon2id, a modern algorithm designed to resist cracking. We never store or send them in plain text, and repeated wrong attempts are rate-limited.
A shielded front door
Our public services sit behind a global edge network. Our servers prove that a request really came through it before answering.
Only the data we need
The shared login directory stores phone numbers only as keyed hashes, and your phone’s biometrics never leave the device. We collect what running your gate requires — nothing more.
Everything leaves a trail
Entries, exits, pass changes and administrative actions are recorded, so your community can always answer “who did what, and when”.
Least privilege for everyone
Residents, guards, landlords and administrators each see and do only what their role allows. A resident sees their own house’s log, never the neighbor’s.