TenantBay Logo
TenantBay

Security

Your tenants' data stays private.

Every account sees only its own properties, tenants and documents, on the web and on both phone apps. Everything below is in place today.

Talk to usStart free
A closed vault door standing for secure rental records.

What is in place

Four layers of protection.

Access

Each account sees only its own records

Your properties, tenants, leases and documents are private to your account, and the boundary is enforced on the data itself.

  • Access is checked on every record, not only on the screen that displays it.
  • A person's role is set by the account owner and cannot be changed by the user.
  • The iPhone and Android apps follow exactly the same rules as the web app.

Documents

A link alone will not open or sign a lease

Every signer confirms a one-time code sent to the address on the tenancy, so a forwarded email cannot sign.

  • Signing links expire on our servers, and attempts are limited per link and per address.
  • Documents are generated on our servers from a fixed copy of the agreement.
  • Identity documents a tenant uploads are removed permanently when they are deleted.

Payments

Card details never reach us

Subscription payments run through Stripe, with confirmations verified on our side before anything changes.

  • No card number, security code or bank credential is ever stored by TenantBay.
  • Rent is recorded by both sides rather than moved by us.
  • Every change is checked against the account making it.

Mobile

Your phone keeps its session safely

Sessions are held in the device keychain and cleared the moment you sign out.

  • Signing out ends the session and stops push notifications to that device.
  • Released builds carry no debug logging, and unencrypted connections are refused.
  • Crash reports carry an anonymous account reference and nothing else.

For your review

Answers for your security team.

Tell us what your policy requires and we will answer it in writing.

  • A written summary of where your data is held and who can reach it.
  • Answers on access control, retention and deletion for your own policy review.
  • A named contact and a written response commitment on contract accounts.
  • A monitored address for vulnerability reports, answered by our team.

Reporting a vulnerability

If you believe you have found a vulnerability, email hello@tenantbay.com with enough detail to reproduce it. We confirm receipt, tell you what we find, and welcome reports made in good faith.

Start free

Ask us before you migrate.

Tell us what your security policy requires and we will tell you where we stand against it.

Create your accountSee pricing

Free for up to 4 units, with no card required.