How Rentchee keeps each rental business’s data separate, encrypted and recoverable.
Every record belongs to one tenant. Database rules check the signed-in user’s tenant on every read, write, edit and delete, so no business can ever see or change another business’s inventory, quotes, customers or payments.
All traffic is served over TLS. Sensitive credentials — payment gateway keys, third-party API keys and platform secrets — are encrypted with AES-256-GCM before they are stored, and are never returned to a browser in plain text.
Accounts are separated into admin, manager and staff roles, with each role limited to what it needs. Two-factor codes and remembered-device controls are available on admin accounts.
Data is backed up on a nightly schedule and critical actions are written to a tamper-evident audit log, so changes can be traced back to the person and time they were made.
If you believe you have found a vulnerability, or you are a customer with a question about how your data is handled, contact us and we will respond as quickly as we can. Please do not test against another business’s account or against live customer data.
support@rentchee.ca