How your data is protected

Account access

Database rules prevent other accounts from reading or changing your properties, receipts, and tax packages. Files are kept in private storage and access is checked against the account that owns them.

Storage

Supabase provides the database, sign-in, and file storage. Your data is encrypted at rest.

Vercel hosts the website. Connections to it are encrypted in transit using TLS.

These providers have their own security and compliance programmes. Their certifications do not certify Rentdocket itself.

Payments

Billing has not launched. Payments are planned through Stripe's hosted checkout, so card numbers will go directly to Stripe and will not be stored on Rentdocket's servers.

Download your records

You can download each tax year's transactions and every generated package as CSV files on every plan. This includes records from years that your plan no longer allows you to edit. Download anything you want to keep before closing your account.

Independent review

Rentdocket does not have a SOC 2 report or ISO 27001 certification, and it has not had an independent security audit.

The product is built and supported by one developer.