How RentFlow protects your property & tenant data
We believe property owners should never have to compromise between modern cloud convenience and ironclad data privacy. Here is a transparent breakdown of our security architecture, database partitioning, and compliance standards.
Strict Multi-Tenant Database Isolation
RentFlow is engineered with strict database partitioning. Every tenant-owned model automatically carries global tenancy query scopes. It is architecturally impossible for one property owner or staff member to view, query, update, or export records belonging to another business.
-
✓
Automatic Query Scoping: All database queries (units, contracts, invoices, meter readings, ledgers) are enforced with
organization_idconstraints at the ORM layer. - ✓ Zero Cross-Tenant Leakage: Attempting to read another organization's record by guessing IDs returns a strict 404 Not Found response.
- ✓ Super Admin Audit Escalation: Platform administrators cannot view tenant records without an explicit, audited escalation session that records the reason, operator ID, and timestamp.
Encryption in Transit & at Rest
From tenant contract signatures to utility bill downloads, all communication uses strict cryptographic protections. We enforce HTTP Strict Transport Security (HSTS), forcing modern web browsers to interact only over encrypted connections.
- ✓ 256-Bit SSL/TLS Encryption: All HTTP and WebSocket traffic operates on TLS 1.3 to prevent eavesdropping or man-in-the-middle attacks.
- ✓ Tenant Document Protection: Government IDs and lease PDFs are stored in private cloud storage partitions and served only via ephemeral signed magic links.
- ✓ No Plaintext Passwords: Credentials use cryptographic bcrypt stretching, making brute-force attacks infeasible.
Payment Gateway Security & Ledger Integrity
RentFlow connects with the Philippines' leading payment networks (GCash, Maya, BDO, BPI, Visa, and Mastercard) through certified PCI-DSS Level 1 payment infrastructure partners.
- ✓ Zero Raw Card Storage: Credit card numbers, CVVs, and banking PINs never touch RentFlow servers. Payments are tokenized directly with PCI-compliant payment gateways.
- ✓ Double-Entry Ledger Invariant: Security deposits, advance rent, payment allocations, and carry-forward balances are tracked with exact centavo precision using strict non-floating decimal arithmetic.
- ✓ Non-Destructive Over-Limit Protection (§49.5): An over-limit or suspended organization's financial records are NEVER deleted, altered, or pruned.
Full platform support for the Right to be Informed, Right to Access, Right to Rectification, Right to Erasure/Blocking, and Data Portability.
Every signup, terms acceptance, and privacy consent records an immutable audit record containing IP address, user agent, and timestamp.
Dedicated compliance and data subject request handling at dpo@rentflow.ph.
Philippine Data Privacy Act (RA 10173)
RentFlow is designed from the ground up to respect the regulatory mandate of the National Privacy Commission (NPC). We maintain clear legal roles to ensure property owners fulfill their obligations under Philippine law:
- ✓ Personal Information Controller (PIC): Property owners act as the PIC for their tenants' information, retaining full ownership and rights over their tenant registry.
- ✓ Personal Information Processor (PIP): RentFlow processes tenant records strictly on behalf of the owner to provide billing, communication, and accounting automation.
- ✓ Export Guarantee: Any organization that has ever paid for RentFlow retains permanent access to export its full data archive, even if downgraded to the free tier (§49.3).
Automated Backups & 99.9% Uptime SLA
Property operations cannot stop because a server went offline. RentFlow utilizes redundant cloud infrastructure with automated disaster recovery protocols.
Database snapshots are captured daily and stored in encrypted, geographically redundant storage with point-in-time recovery.
24/7 automated monitoring tracks database latency, query execution times, background billing queues, and API availability.
System schema upgrades run in transactional stages, ensuring zero loss of accounting or lease history during new feature releases.
Frequently Asked Questions
Common questions from property owners regarding security and data privacy.
Can my staff see my total property revenue?
No. RentFlow provides granular role-based permissions (Owner, Manager, Staff, Tenant). Staff users can be restricted to specific assigned properties and prevented from viewing profit reports or releasing deposit refunds.
Can other landlords or tenants view my billing rates?
Never. Every landlord's settings, custom utility rates, and tenant registers are isolated by database tenancy scopes. Tenants only see the bills specifically issued to their individual lease contract.
How do tenants sign leases without creating an account?
Tenants receive a secure, 30-day signed magic URL via SMS/Email. The link is protected by cryptographic HMAC tokens, allowing the tenant to review, sign, and download their contract securely without passwords.
What happens to my data if I cancel my subscription?
Under our §49.5 invariant, your data is never deleted or pruned. Even on free or suspended accounts, owners who have ever paid retain permanent data export privileges to download their complete records.
Have specific security or compliance requirements?
If your organization manages commercial portfolios, large residential dormitories, or requires a custom Data Sharing Agreement (DSA), our compliance team is here to assist.