LeaseLoop
Back to Home

Security & Privacy

How We Protect Your Data

LeaseLoop is built on established, security-focused infrastructure providers:

  • TLS encryption for all data in transit
  • Encrypted data storage at rest, provided by our hosting infrastructure (Neon Postgres, Cloudflare R2)
  • Password hashing (bcrypt) — we never store your password in plain text
  • Role-based access controls (landlord vs. admin)
  • Rate limiting on login and registration to guard against brute-force attempts

Where We Are Today

LeaseLoop is an early-stage, independently built platform. In the interest of being straightforward with landlords trusting us with their data:

  • We do not hold SOC 2, ISO 27001, or similar third-party security certifications
  • We have not undergone a formal third-party security audit or penetration test
  • Database backups currently rely on our database provider's own point-in-time recovery, not a separate backup system
  • Multi-factor authentication is not yet available

We'll update this page as our security posture matures. Questions about a specific control? Email leaseloophq@gmail.com.