Security

Your leases and your ledger.
Only the right people.

A rent roll is a private financial record. So is every tenant's balance. This page says, in plain words, who can see them, how a person gets in, why a posted dollar is never erased, and what we have not built yet.

One entry in the audit trail kept for good
whatReceipt posted
whoSofia Marin · Accounting
tenantQuickBite Poke · L-0004
amount$4,690.00
reasonACH received Sep 11
recordedSep 12, 2026 · 09:14
edited laternever · a mistake gets a linked reversal
How it is built

Six things that are true today.

Each one is something the app does now, not a plan. If this page is ever ahead of the product, write to us and we will fix the page.

One company, one set of records

Your buildings, tenants and money sit in your company alone. Nobody at another company can open them, and no report ever mixes two companies. A tenant, an owner or a vendor who signs in sees their own records and nothing else.

Roles that the server enforces

Admin, Property manager, Accounting, Leasing agent and Maintenance coordinator each have a fixed list of things they may do. The server checks that list on every request. Hiding a button is not a permission. Staff can also be limited to the buildings they cover.

Money that is never erased

A posted charge or receipt is never edited or deleted. A mistake gets a reversal that points back at the original, so a closed month stays exactly as it was reported to the owner. Issued statements are kept as exact copies.

A record of every change

Every change records who made it, their role, what it touched, when it took effect and the reason they typed. Undo adds a new entry rather than erasing the first. The whole trail exports when an owner or an auditor asks.

Sign-in that locks itself

Passwords are at least 12 characters. Five wrong tries lock the account for 15 minutes. A session ends after 8 hours. You can sign out every other device from your account, and changing your password does that for you.

Backed up every day

Your data lives on Google Cloud in the United States, encrypted on disk and on the wire. It is backed up every day and can be restored to any minute in the last seven days. The database cannot be deleted by accident.

The rule underneath

The server decides.
The screen only shows it.

Locks, hidden pages and greyed buttons are conveniences. The decision about what a person may see or change is made on the server, for every request, from their role and their company. A tenant who edits the address bar still gets only their own tenancy.

What a tenant sees Leo Park · QuickBite Poke
  • Their own balance, ledger and statementsyes
  • Their own lease and documentsyes
  • Their own maintenance requests and messagesyes
  • Another tenant's balanceno
  • The rent roll or any owner's statementno
  • Anything at all, if you switch the tenant portal offno
Two sides

What we look after. What you look after.

Most of the risk in a property office is not the software. It is who has a login and what they are allowed to do. The app gives you the switches; you decide who gets them.

We handle

  • The servers, the database, the backups and the restore.
  • Keeping companies apart and enforcing roles on every request.
  • Encryption, sign-in rules and session limits.
  • The mail servers behind notices and replies.
  • Keeping your Lob or PostGrid key encrypted; only its last four characters are ever shown again.

You handle

  • Who gets a login, and which role and buildings they get.
  • Removing a login the day someone leaves.
  • Switching a portal off when a tenant, owner or vendor should no longer see their records.
  • The reason you type when you change a record; it is what the audit trail shows later.
  • Keeping your own copies: export the rent roll, ledgers and the audit trail whenever you like.
Not yet

What we have not built.

We would rather tell you here than have you find out after signing up.

Two-factor sign-inNot available yet. Passwords are 12 characters or more and accounts lock after five failed attempts.
Single sign-onNo Google or Microsoft sign-in yet. Each person has an email and password.
SOC 2 or ISO 27001 reportWe have not been audited. The six items above are what an auditor would look at.
Hosting outside the United StatesOne region in the central US. No EU or Canadian region.
Card and ACH rent paymentsComing. Until then you record receipts that ran through your bank or another processor.
Accounting syncNo QuickBooks or Xero connection. The ledger is inside the app and exports to CSV.

Questions about any of this?
Ask a person.

Email hello@tenantlogix.com See every screen