Tenant isolation
Requests resolve an organisation context before protected records are read or changed. Data access is scoped to that context rather than trusting a workspace identifier supplied by the browser.
SECURITY BY DESIGN
Separate businesses. Separate access.
Rentify uses organisation-level context and server-enforced permissions to separate operational records. A single account can access more than one authorised workspace, but membership and role checks remain specific to each organisation and product.
Role-based access
Capabilities are enforced by the server. Screens reflect those grants, but hiding a control in the interface is never treated as the security boundary.
Auditability
Important operational and financial actions can record the actor and time, supporting review and correction without silently rewriting history.
Transport and sessions
Production services are designed for encrypted HTTPS transport and verified authentication tokens. Development-only tokens are refused unless development authentication is explicitly enabled.
What we do not claim
Rentify does not claim SOC 2, ISO 27001 or another formal certification on this page. Independent certifications and test results will be published only after they are earned and verified.