Security center
Security & trust center
Property management runs on sensitive information and other people's money. Here is how we protect both, in plain terms, so you can check our work before you trust us with your portfolio.
Controls we run today, not plans
Every item below is part of how the product is built. We do not list aspirational controls, only what is in place.
How we protect your data
These controls are live in production.
Tenant isolation on every query
Each company's data is walled off from every other company's. Every read and write is scoped to the company making the request.
Role-based access, checked every time
Every action is checked against a permission policy before it runs. Owners grant staff least-privilege access, down to per-property roles.
Anti-IDOR identifiers
Records use random UUID identifiers, not sequential numbers. Nobody can guess a record or walk the IDs.
Encryption in transit and at rest
All traffic is served over HTTPS with TLS. Database and document storage encrypt data at rest. Secrets are in encrypted credentials, never in code.
Reviewed changes, scanned in CI
Every change ships through a pull request with static security analysis and dependency-vulnerability scans before it can merge.
We never hold your money
Rent and deposits move straight to your bank through Stripe Connect. LeaseRooster never takes custody of tenant funds.
Built to earn your trust
Start with your first 3 units free. Your data is encrypted, isolated by company, and never used to custody funds.