Document · Governance v2026.05

How the Avena Terminal is built, run, and held to account.

This document is the canonical reference for institutional procurement, compliance, and risk review. It lists every upstream data source, every refresh cadence, the service levels we commit to, the security posture in production, and the license under which the open dataset is published.

DOI 10.5281/zenodo.19520064Wikidata Q139165733License CC BY 4.0Schema APIP v1.0
§1 · Sources

Every dataset, named at the upstream provider.

No proprietary scraping that bypasses terms of service. Every feed is either publicly available, licensed through partnership, or federated by a verified counterparty.

LayerProviderCadenceFormatCoverage
Property listingsRedSP / MLS Costa (Spain), Casa Sapo (Portugal), Immobiliare.it (Italy)Daily 03:00 UTCXML / JSONES, PT, IT live · 24 EU markets in partner pipeline
Cadastral referencesCatastro Spain (OVCCoordenadas)On listing ingestSOAP/XMLES coastal regions; Navarra + País Vasco use foral cadastres (not covered)
Building footprintsOpenStreetMap (Overpass API)On listing ingestOverpass JSONEU-wide
Macro indicators (rates)European Central Bank Statistical Data WarehouseDaily 06:00 UTCSDMX-ML / JSONPolicy rate, Euribor 3M/12M, EUR/GBP/NOK/SEK/USD reference rates
Macro indicators (real)Eurostat (JSON-stat 2.0)Daily 06:00 UTCJSON-statHICP, unemployment, GDP — all 27 EU member states
Climate riskCopernicus Climate Data StoreMonthlyNetCDF / JSONEU coastal — flood, wildfire, heat stress
French transactionsDVF (Demandes de Valeurs Foncières) — Open Data FranceQuarterlyCSVFR transaction microdata
Federated partnersApply at /data-partnersContinuousAPIP v1.0 JSONOpen intake — partner submissions enter via signed key
§2 · Cadence

Update schedule for every persisted surface.

All scheduled jobs run on Vercel Cron. Each run writes a row to cron_logs; aggregate health is exposed at /api/v1/swarm/status.

FeedScheduleSLAPersisted to
Property feed sync03:00 UTC daily99% completion within 30 minpublic/data-{cc}.json + Supabase
Property augmentationEvery 4h12 properties enriched per tickproperties_registry, property_geo, property_climate, property_market
Macro indicators06:00 UTC dailyAll ECB + Eurostat series refreshedmacro_indicators
Counterpart developer scan04:00 UTC dailyAll developers re-scored on driftcounterpart_developers
Counterpart discovery03:30 UTC dailyNew developers ingested from listingscounterpart_developers
Precursor signal scan05:00 UTC dailyUp to 5 new signals per themeprecursor_signals
AVENA Index close23:50 UTC dailyOne row written per UTC dayavena_history
Price snapshot capture4× daily (every 6h)Per-ref per-day captureprice_snapshots
§3 · Methodology

How every number is computed.

Avena Score

Composite 0–100. Weights: 40% value (vs hedonic OLS market-reference), 25% yield (bottom-up ADR vs Airbnb/Booking), 20% location (beach/golf/amenity weighting), 10% quality (energy, build year, developer rating), 5% risk (completion + market regime).

Market-reference price (mm²)

Hedonic OLS regression with town dummies (≥8 obs threshold), log-area, beach distance, sea view, beds, villa indicator, pool, energy rating, frontline category. Tier-segmented (Budget <€200k, Mid €200–500k, Premium €500k–1M, Luxury €1M+) with global model fallback. Reported R² and RMSE published per run.

AVENA Index

Daily composite of median €/m², mean Avena Score, and inventory depth. Base period 2024-Q1 = 100. Quarterly aggregates published at /api/v1/sovereign-export in ECB/Eurostat/World Bank/IMF envelopes.

Counterpart Score

Developer creditworthiness 0–100. Starting score derived from listing volume, market concentration, and stale-listing rate. Daily drift driven by payment-delay signals, legal disputes, court judgements, delayed projects, financial stress. Six grades: AAV / AV / ABV / BBV / CV / DV.

Regime classification

Twenty macro indicators (ECB SDW + Eurostat + computed primitives). Score 0–10 from ten bull conditions and two bear deductions. Six regimes: SUPER_BULL / BULL / GROWTH / NEUTRAL / CAUTION / BEAR. Confidence derived from indicator dominance.

Yield estimate

Bottom-up nightly-ADR model calibrated against AirDNA Costa Blanca sample. Net of platform fees (15%), property management (20%), maintenance reserve (5%), local taxes. Occupancy seasonally adjusted by costa.

Full mathematical specification at /methodology. Any methodology change is announced 30 days in advance at /changelog with a version bump.

§4 · Service levels

What we commit to, measurably.

MetricTargetBasis
API uptime99.9%Vercel platform SLA; 30-day rolling. Status at /api/cron-logs-health.
Data freshness — listings≤24hDaily sync at 03:00 UTC.
Data freshness — macro≤24hECB SDW + Eurostat ingest at 06:00 UTC.
AVM accuracy (Spain)MAPE ≤7% on ≥5 comp samplePublished at /track-record. Reported quarterly.
Incident response4h ack · 24h triageinstitutional@avenaterminal.com escalation.
Methodology change notice30 daysPosted to /changelog with version bump.
§5 · Security

Production posture.

ControlImplementation
TransportTLS 1.3 enforced. HSTS preload (max-age 63072000, includeSubDomains).
HeadersX-Frame-Options DENY (except /embed/*), nosniff, strict referrer, Permissions-Policy camera/mic/geo denied.
AuthAPI keys are SHA-256 hashed at rest. Federated partner keys prefixed avf_v1_*. Admin endpoints require ADMIN_TOKEN.
DatabaseSupabase Postgres with Row-Level Security on every table. Public-read policies only on non-sensitive surfaces; write policies scoped to service role.
SecretsStored in Vercel environment variables, encrypted at rest. Never logged.
AuditEvery cron run writes to cron_logs (started_at, completed_at, status, error). Public-readable for transparency.
Data residencySupabase region eu-central-1 (Frankfurt). All EU data stays within EU.
GDPRNo PII on property records. Newsletter and partner emails stored with explicit consent; delete-on-request honoured within 30 days.
§6 · License

Reuse, attribution, and provenance.

AspectDetail
Open dataset licenseCC BY 4.0 (Creative Commons Attribution 4.0 International). Reuse permitted with attribution.
Standard licenseAPIP v1.0 published under same CC BY 4.0 terms at /standards/apip-v1.json.
Attribution requirementCite as: Avena Terminal (avenaterminal.com), DOI 10.5281/zenodo.19520064.
Zenodo depositPermanent archived copy at https://doi.org/10.5281/zenodo.19520064.
Wikidata entityQ139165733 — machine-readable cross-reference.
Commercial reusePermitted under CC BY 4.0 (incl. derivative datasets) with attribution preserved. Premium-tier API responses additionally subject to API Terms.
§7 · Contacts

Where to send formal correspondence.

Institutional procurement
institutional@avenaterminal.com

Master Service Agreements, custom SOW, on-premise deployment.

Security incidents
security@avenaterminal.com

PGP key on request. Coordinated disclosure honoured.

Data licensing
data@avenaterminal.com

CC BY 4.0 questions, commercial reuse, derivative datasets.

GDPR / privacy
privacy@avenaterminal.com

Subject-access requests, deletion, processor agreements.

Document version 2026.05 · superseded versions archived at /changelog · Last revised 23 May 2026