Microsoft 365
Mail, files and Teams configured for people who work from a phone as much as a laptop.
Property & real estate
Agents are rarely at a desk. The IT should not assume they are.
Estate agencies, property managers and developers work from phones, cars, viewings and several offices at once — while handling contracts, client money and personal data. We build IT that suits that, and protects it.
- Mobile-first, managed
- Documents under control
- Multi-office ready
Technologies we work with
- Microsoft
- SOPHOS
- Acronis
- HPE
- 3CX
- UBIQUITI
- veeam
What we set up
IT for a business that happens away from the office
Property businesses hold an unusual combination: highly sensitive documents, significant payments, staff who are rarely in one place, and often several branches that grew separately.
Mobile device security
Company data protected on phones and tablets, and removable remotely, without taking over someone's personal device.
Document protection
Contracts, valuations and client records in a structured, permissioned library rather than scattered across inboxes and desktops.
Remote access
Everything reachable from a viewing or a site visit, with access decided on identity and device rather than location.
Onboarding
A new agent set up quickly and consistently, and cut off completely the day they leave — which matters in a sector with movement.
Multi-office networking
Branches connected and managed as one estate, with the same security in the small office as in the main one.
Backup
Independent backup of mail and documents, with retention that suits how long you must keep transaction records.
Cyber risk
Controls aimed squarely at the sector's real exposure: mailbox compromise and fraudulent changes to payment details.
Telephony
Calls handled through Teams or a hosted phone system, so enquiries reach the right person wherever they are.
Data protection
Access, retention and sharing controls that help you meet your obligations over client personal data.
Support that travels
Helpdesk that can fix a device wherever it is, because "bring it in" is not a useful answer to someone between viewings.
Working with your CRM
We support the identity, devices and connectivity your property CRM relies on, and liaise with its vendor over anything in between.
The risk that matters most
Payment redirection is the one to design against.
Property is targeted deliberately, because the payments are large and the email threads are long enough to hide in. The usual pattern is a mailbox compromised weeks earlier, quietly watched, and then a convincing message at completion changing the account details. The controls that prevent it are not exotic.
- Multi-factor authentication on every mailbox, without exception
- Impersonation and lookalike-domain protection switched on
- Alerting when a mailbox forwarding rule is created — the attacker's first move
- Mailbox auditing enabled, so an investigation has something to work from
- A standing rule that payment details are verified by phone, on a known number
- Short, specific staff training on exactly this scenario
Inbox
sales@agencia-exemplo.pt
Updated account details for completion
New conversation · not in “Rua das Amoras 14 – completion” (23 messages)
Hi Rui,
Ahead of completion, please note our client account has moved.
Funds must reach the new account below today. Please ignore the details in our letter and reply by email only, as I am in meetings all afternoon.
New account details
IBAN
PT50 0000 XXXX XXXX XXXX XXXX X
RefCompletion · Rua das Amoras 14
Thanks, Sofia
Looks routine?
There are five warning signs in this email.
Warning sign 1 of 5
Lookalike domain
marlowequay-pt.com, not marlowequay.pt. One hyphen and a different ending, easy to miss on a phone.
Without checks, the money goes
With checks, the payment is held
- Details updatedThe new IBAN goes on the file
- Funds sentCompletion money leaves today
- Paid to the attackerNoticed when the real firm asks where it is
- Sender flaggedImpersonation protection spots the lookalike
- Call back on a known numberThe one on file, never one from the email
- Payment heldDetails not changed. The real firm confirms it.
Often the attacker has read a compromised mailbox for weeks, so the timing and tone feel right. MFA on every mailbox, lookalike protection, forwarding-rule alerts, a call-back habit. None of it is expensive.
Illustration. All names, domains and account details are fictional.
The challenge
IT for teams that work from viewings, not desks
Property businesses handle sensitive documents and large payments while their people are rarely in the office.
Agents working from viewings, cars and home
Secure Microsoft 365 access on laptops and phones, wherever the team is.
Contracts and ID documents in inboxes and personal drives
Shared, permission-controlled storage with sensible retention.
Payment-diversion fraud on deposits and completions
Email security, MFA and simple verification steps your team can follow.
Several branches, each set up differently
One standard for devices, accounts and networks across every office.
How we work
Tidy the documents, secure the mail, support the people.
-
Review
Where documents live, how mail is protected, what devices exist, and which branches differ from each other.
-
Secure
MFA, impersonation protection, mailbox alerting and device management applied across the whole business.
-
Organise
Documents moved into a structure with sensible permissions and retention, so nothing important lives only in an inbox.
-
Support
Ongoing managed IT for people who are rarely at a desk, with monitoring, patching and a helpdesk that comes to them.
Why CaminhoIT
Used to mobile teams and more than one office.
Property businesses grow by opening branches and hiring agents, which means the IT has to work for someone who joined yesterday and is standing in a car park. That is a different problem from supporting a floor of desks, and it is one we deal with routinely.
- Mobile-firstmanaged properly, not ignored
- Multi-branchone standard everywhere
- Fraud-awaredesigned against the real risk
- English & Portugueseuseful for cross-border agencies
- Fast onboardingand clean offboarding
- On-site in the Algarveand Alentejo
Questions
Questions from property businesses
Our agents use their own phones. Can you secure that?
Yes, and without taking over their personal device. Application-level protection keeps company mail and files in a managed container: it can require a PIN, prevent copying data into personal apps, and be wiped remotely — removing only the company data and leaving photos and personal accounts untouched. Agents accept it far more readily than full device enrolment, which is why it is usually the right answer here.
What is the most important thing we could fix this month?
Multi-factor authentication on every mailbox, if you do not already have it. Mailbox compromise is the entry point for almost every serious incident in this sector, and MFA closes off the great majority of them. It takes a morning to roll out and costs nothing on the licences you already hold. If MFA is in place, the next item is alerting on mailbox forwarding rules.
Can you work with our property CRM?
We support the identity, devices, connectivity and integrations your CRM depends on, and we deal directly with its vendor over anything that sits between us. We are not a CRM vendor and would not pretend to be — but a great many CRM problems turn out to be sign-in, browser or connectivity problems, which are ours.
Every branch does things differently. Is that fixable?
Yes, and it is usually worth doing. Branches that were opened or acquired at different times end up with different equipment, different file structures and different security, which makes every support call a fresh investigation. We bring them onto one design in stages, starting with identity and security since those carry the most risk.
How long do we need to keep transaction documents?
That is a legal and regulatory question, and it varies by jurisdiction and document type — your legal adviser should set the periods. What we do is implement them: retention policies applied automatically, so documents are kept for as long as they must be and are not kept indefinitely by accident, which carries its own data-protection risk.
We operate in both Portugal and the UK. Does that complicate things?
It is a good fit for us, since we work across both. One Microsoft 365 tenant normally covers the whole business, with support in English and Portuguese and local procurement in each country. The parts needing deliberate thought are data location and retention, which we confirm rather than assume.
Want to know how exposed your mail actually is? Run the IT Health Check →
Ready to get started?
Let us look at your mail security first.
For a property business it is the fastest, cheapest risk to close. We will tell you where you stand in one conversation.