XML 55 R38.htm IDEA: XBRL DOCUMENT
v3.25.4

Cybersecurity Risk Management and Strategy Disclosure | 12 Months Ended
--- | ---
Dec. 31, 2025
Cybersecurity Risk Management, Strategy, and Governance [Line Items] |
Cybersecurity Risk Management Processes for Assessing, Identifying, and Managing Threats [Text Block] | Risk Management and Strategy ​ We recognize the importance of developing, implementing and maintaining robust measures to safeguard our electronic information systems and we have established processes, described below, to assess, identify, manage and mitigate risks from cybersecurity threats and cybersecurity incidents. We believe our processes are reasonable for real estate companies of our size, complexity, and risk profile. ​ We have integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Under the direction of our Executive Vice President of Technology, Data Science & Marketing and our Director, Cybersecurity (together, the “Cybersecurity Leadership Team”) our information technology department regularly monitors cybersecurity threats and leads the prevention, detection, mitigation and remediation of cybersecurity incidents, with regular reporting to senior management and to the Board on these topics. ​ The Critical Security Controls, a prescriptive, prioritized, and standardized set of globally recognized best practices, guide our information security strategy. The Critical Security Controls are developed and maintained by the Center for Internet Security, Inc., a nonprofit organization with over 20 years of experience in helping individuals, businesses and governments protect themselves against cyber threats. We also consider best practices from third-party vendors and payment processors and from the Cloud Security Alliance, a nonprofit organization that leverages global expertise to offer research and education programs related to cloud security. ​ Recognizing the complexity and evolving nature of cybersecurity threats, we also retain a range of external experts, including cybersecurity assessors, consultants and auditors in evaluating and testing our information security processes and systems. These engagements enable us to access specialized knowledge and insights, ensuring our cybersecurity strategies and processes remain at the forefront of industry best practices. Our engagements with these third parties include regular audits, threat assessments and consultations on security enhancements. We also regularly conduct information security training to ensure that all employees, including those who may come into possession of confidential financial or personally identifiable information, are aware of information security risks and are equipped to take steps to mitigate such risks. The results of such tests, assessments, reviews and trainings are evaluated by senior management and our cybersecurity policies, processes and practices are refined as necessary based on the information provided. ​ We routinely conduct risk-based security assessments and assurance activities related to our third-party service providers that have access to our electronic information (including data centers operated by third parties and cloud computing platforms) and we maintain policies and procedures to oversee and identify cybersecurity risks associated with our use of third-party service providers. Our policies and procedures also include technical controls and processes, as well as contractual mechanisms to mitigate risk. These activities include a combination of direct review, reliance on independent third-party assessments, and periodic oversight by the Cybersecurity Leadership Team, with support from their staff. ​ Since January 1, 2023, we have not experienced any cybersecurity incidents that have resulted in material financial loss. We are not aware of any cybersecurity threats or cybersecurity incidents that have materially affected or are reasonably likely to materially affect us or our business strategy, results of operations or financial condition.
Cybersecurity Risk Management Processes Integrated [Text Block] | We recognize the importance of developing, implementing and maintaining robust measures to safeguard our electronic information systems and we have established processes, described below, to assess, identify, manage and mitigate risks from cybersecurity threats and cybersecurity incidents. We believe our processes are reasonable for real estate companies of our size, complexity, and risk profile. ​ We have integrated cybersecurity risk management into our broader risk management framework to promote a company-wide culture of cybersecurity risk management. This integration ensures that cybersecurity considerations are an integral part of our decision-making processes at every level. Under the direction of our Executive Vice President of Technology, Data Science & Marketing and our Director, Cybersecurity (together, the “Cybersecurity Leadership Team”) our information technology department regularly monitors cybersecurity threats and leads the prevention, detection, mitigation and remediation of cybersecurity incidents, with regular reporting to senior management and to the Board on these topics.
Cybersecurity Risk Management Third Party Engaged [Flag] | true
Cybersecurity Risk Materially Affected or Reasonably Likely to Materially Affect Registrant [Flag] | false
Cybersecurity Risk Board of Directors Oversight [Text Block] | Board of Trustees Oversight ​ The Board acknowledges the importance of managing risks associated with cybersecurity threats and cybersecurity incidents and has established oversight mechanisms to manage such risks. The Audit Committee is central to the Board’s oversight of cybersecurity risks and bears the primary responsibility for this domain. The Audit Committee is composed of five independent Trustees, two of whom have considerable information technology experience. ​ The Audit Committee receives comprehensive briefings from the Cybersecurity Leadership Team on an annual basis. These briefings help identify areas for improvement and ensure the alignment of cybersecurity efforts with our overall risk management framework. The broad range of topics encompassed in these briefings includes: ​
| ● | The current cybersecurity landscape and emerging threats;
| ● | Our cybersecurity posture and the effectiveness of our risk management strategies;
| ● | The status of ongoing cybersecurity initiatives and strategies; and
| ● | Our compliance with regulatory requirements and industry standards.
​ Our established system of internal controls also provides for the Audit Committee to receive prompt information regarding any cybersecurity incident that meets established internal reporting thresholds, as well as updates regarding any such incident until it has been fully remediated. The Audit Committee provides updates to the Board regarding such matters, as appropriate.
Cybersecurity Risk Board Committee or Subcommittee Responsible for Oversight [Text Block] | Audit Committee
Cybersecurity Risk Process for Informing Board Committee or Subcommittee Responsible for Oversight [Text Block] | The Audit Committee receives comprehensive briefings from the Cybersecurity Leadership Team on an annual basis. These briefings help identify areas for improvement and ensure the alignment of cybersecurity efforts with our overall risk management framework. The broad range of topics encompassed in these briefings includes: ​
| ● | The current cybersecurity landscape and emerging threats;
| ● | Our cybersecurity posture and the effectiveness of our risk management strategies;
| ● | The status of ongoing cybersecurity initiatives and strategies; and
| ● | Our compliance with regulatory requirements and industry standards.
​ Our established system of internal controls also provides for the Audit Committee to receive prompt information regarding any cybersecurity incident that meets established internal reporting thresholds, as well as updates regarding any such incident until it has been fully remediated. The Audit Committee provides updates to the Board regarding such matters, as appropriate.
Cybersecurity Risk Role of Management [Text Block] | Management Oversight ​ Primary responsibility for the oversight of the assessment, identification and management of our cybersecurity risks rests with our Executive Vice President of Technology, Data Science & Marketing. Under her direction, these risk mitigation efforts are designed, tested, and implemented by our Director, Cybersecurity. Collectively, the Cybersecurity Leadership Team has over 50 years of experience in the field of Information Technology, holding relevant academic degrees and industry certifications, including the Certified Cloud Security Professional and Certified Information Systems Security Professional designations. The Cybersecurity Leadership Team oversees our information technology governance programs, tests our compliance with standards, remediates known risks, and leads our employee cybersecurity training program. ​ The Cybersecurity Leadership Team continually assesses and discusses the latest developments in cybersecurity, including potential threats and innovative risk management techniques. This ongoing knowledge acquisition enhances our processes that are used to identify, prevent, mitigate and remediate cybersecurity threats and cybersecurity incidents. The Cybersecurity Leadership Team’s responsibilities include the deployment of advanced security measures and regular system audits to identify potential vulnerabilities. In the event of a cybersecurity incident, the Cybersecurity Leadership Team is equipped with a well-defined incident response plan. This plan includes immediate actions to mitigate the impact of the incident, reporting such events to senior management, and developing strategies for remediation and prevention of future incidents. ​ Emerging or potential cybersecurity risks are communicated to senior management by the Cybersecurity Leadership Team. Together, they discuss updates on any significant developments in the cybersecurity domain, ensuring that management’s oversight is proactive. In addition, a cross-organizational cyber task force, which includes the Cybersecurity Leadership Team and several members of senior management, meets regularly to consider and address cybersecurity risks, including risks related to our use of third-party service providers. This task force reports regularly to senior management, who actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. The involvement of senior management in our cybersecurity strategy ensures that cybersecurity considerations are collaborative and integrated into our broader strategic objectives. ​
Cybersecurity Risk Management Positions or Committees Responsible [Flag] | true
Cybersecurity Risk Management Positions or Committees Responsible [Text Block] | Executive Vice President of Technology, Data Science & Marketing
Cybersecurity Risk Management Expertise of Management Responsible [Text Block] | Cybersecurity Leadership Team has over 50 years of experience in the field of Information Technology, holding relevant academic degrees and industry certifications, including the Certified Cloud Security Professional and Certified Information Systems Security Professional designations.
Cybersecurity Risk Process for Informing Management or Committees Responsible [Text Block] | Emerging or potential cybersecurity risks are communicated to senior management by the Cybersecurity Leadership Team. Together, they discuss updates on any significant developments in the cybersecurity domain, ensuring that management’s oversight is proactive. In addition, a cross-organizational cyber task force, which includes the Cybersecurity Leadership Team and several members of senior management, meets regularly to consider and address cybersecurity risks, including risks related to our use of third-party service providers. This task force reports regularly to senior management, who actively participates in strategic decisions related to cybersecurity, offering guidance and approval for major initiatives. The involvement of senior management in our cybersecurity strategy ensures that cybersecurity considerations are collaborative and integrated into our broader strategic objectives. The Cybersecurity Leadership Team provides regular updates to the cyber task force regarding relevant cybersecurity risks and incidents, in accordance with established internal reporting and escalation processes. This ensures the highest levels of management are kept abreast of our cybersecurity posture and the potential risks facing us. Furthermore, as noted below, significant cybersecurity matters and strategic risk management decisions are escalated to the Audit Committee and, as appropriate, the Board, ensuring that such bodies maintain comprehensive oversight and can provide guidance on critical cybersecurity issues.
Cybersecurity Risk Management Positions or Committees Responsible Report to Board [Flag] | true

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskBoardOfDirectorsOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementExpertiseOfManagementResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph iii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph iii + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleReportToBoardFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementPositionsOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskManagementProcessesForAssessingIdentifyingAndManagingThreatsTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph i Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph i + Details
Name: | cyd_CybersecurityRiskManagementProcessesIntegratedTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K + Details
Name: | cyd_CybersecurityRiskManagementStrategyAndGovernanceLineItems
Namespace Prefix: | cyd_
Data Type: | i:stringItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 1 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 1 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskManagementThirdPartyEngagedFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection b -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection b -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskMateriallyAffectedOrReasonablyLikelyToMateriallyAffectRegistrantFlag
Namespace Prefix: | cyd_
Data Type: | i:booleanItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 1 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 1 + Details
Name: | cyd_CybersecurityRiskProcessForInformingBoardCommitteeOrSubcommitteeResponsibleForOversightTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 -Subparagraph ii Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 -Subparagraph ii + Details
Name: | cyd_CybersecurityRiskProcessForInformingManagementOrCommitteesResponsibleTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration

X
- References Reference 1: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Regulation S-K -Section 106 -Subsection c -Paragraph 2 Reference 2: http://www.xbrl.org/2003/role/presentationRef -Publisher SEC -Name Form 20-F -Section 16K -Subsection c -Paragraph 2 + Details
Name: | cyd_CybersecurityRiskRoleOfManagementTextBlock
Namespace Prefix: | cyd_
Data Type: | dtr-types:textBlockItemType
Balance Type: | na
Period Type: | duration