UniHomes operates a nationwide student accommodation platform in the UK that bundles utility management into property pricing. Led by CEO Phil Greaves and founded by former students who experienced housing search friction firsthand, the company runs a marketplace connecting students with letting agents across dozens of university cities and towns. Every listed property includes electricity, gas, internet, water, and TV licence in one evenly-split monthly payment - a pricing model that shifts complexity from students to the platform's operational infrastructure.
The technical architecture handles payments through GoCardless and Stripe integrations, with financial operations managed via Sage Intacct. The platform runs on AWS and Azure infrastructure, with backend work in Python and PowerShell touching MySQL databases and SQL data layers. The site implements JSON-LD for structured data, suggesting attention to search visibility and programmatic property information exchange. With thousands of properties listed nationally, the system processes recurring billing splits, utility account provisioning, and agent-student coordination at scale - operational surface area that creates distinct security requirements around payment data, personally identifiable student information, and third-party vendor access.
The threat model for a platform handling student financial data, utility account credentials, and property access information spans payment fraud, identity theft vectors, and potential exposure of tenancy agreements and personal details. Multi-party transaction flows between students, agents, utility providers, and payment processors create integration points where data validation, authentication boundaries, and access controls become critical. The tech stack's reliance on cloud infrastructure and multiple SaaS payment and accounting platforms means security work likely involves vendor risk assessment, API security, secrets management, and monitoring across distributed systems where student financial and personal data flows through interconnected services.