How we protect your data
All data is encrypted in transit using TLS 1.2 and at rest using AES-256. This is the same standard used by major financial institutions.
RentDesk uses Supabase with Row Level Security enabled on every table. This means your data is isolated at the database level — it is technically impossible for another user to query your properties, tenants, or transactions even if they tried.
Bank connectivity is powered by Plaid, which is trusted by thousands of financial apps including Venmo and Robinhood. RentDesk never sees or stores your banking username or password. Plaid uses bank-grade OAuth flows to establish the connection.
User authentication is handled by Supabase Auth with bcrypt password hashing. Sessions use short-lived JWT tokens. We support email confirmation on all new accounts.
All billing is handled by Stripe. RentDesk never sees or stores your credit card number. Stripe is PCI DSS Level 1 certified — the highest level of payment security certification.
RentDesk is hosted on Cloudflare Pages with global CDN distribution. Our backend runs on Supabase's managed infrastructure in Canada. Both providers maintain SOC 2 compliance.
Found a security issue? Email hello@rentdesk.net. We take all reports seriously and will respond within 48 hours.