🔐 Encrypted secrets
Integration keys, bank account numbers and similar secrets are encrypted before they're stored, and they're write-only in the app: after saving, only the last 4 characters are shown.
Security
How we protect your data
A plain description of what's in place today. We don't claim certifications we haven't earned.
🧑💼 Role privileges
Every user has a role, and every action is a privilege you can grant or remove, by role or by person: who can see owner statements, post payments, print checks, or view other people's texts.
🕘 Activity log
Every change is recorded with who made it and when, including changes to settings and keys.
💳 No stored card data
Full card numbers and CVVs go to your payment processor. Rentsi keeps only the last 4 digits.
🔑 Passwords
Passwords are stored as salted, slow hashes, never in readable form. Sessions use secure, HTTP-only cookies.
🏢 Separate workspaces
Each customer company runs in its own workspace with its own database.
What we don't claim: Rentsi does not currently hold SOC 2, ISO 27001 or any other certification, and has not had a third-party penetration test. If your company requires one, tell us and we'll talk through what we can share.
Found a security issue? Contact us.