Security
How Rentablez protects your rental data
Rentablez is rental management software that holds your inventory, customer, contract and billing records. This page explains the controls that keep that data private to your organisation, recoverable, and auditable.
- Encrypted in transit and at rest
- Tenant isolation per organisation
- Role-based access
- Audit trail
Controls
What is in place
Plain descriptions of the controls that apply to every Rentablez account, on every plan.
-
Encryption in transit and at rest
Traffic between your browser, the mobile apps and Rentablez is encrypted with TLS. Stored data, backups and uploaded documents are encrypted at rest.
-
Tenant isolation by organisation
Every record is scoped to your organisation. Queries are filtered by organisation at the data layer, so one customer can never read another customer’s inventory, orders or contacts.
-
Role-based access control
Permissions are granted per role and per branch. Staff see only the screens and actions their role allows, and sensitive actions such as payment reversal are assignable rather than default.
-
Audit logging
Orders, invoices, payments, stock movements, contracts, inspections and maintenance jobs each keep an audit log of who did what and when, so disputes and reconciliations have a trail to follow.
-
Automated backups
Databases are backed up automatically on a schedule. Backups are encrypted and retained so data can be restored after an operational failure.
-
OTP-verified e-signatures
Rental contracts are signed through a one-time-password flow with a time-limited link, an attempt limit and a full audit trail of who signed, when and from where.
-
Aligned to SOC 2 and ISO 27001 principles
Our controls follow the principles of SOC 2 and ISO 27001: least-privilege access, change control, confidentiality agreements for staff, and a documented incident response process. We do not hold a certification today; a Data Processing Agreement is available on request.
-
Data protection agreement
Rentablez processes your data only on your instructions. We do not sell it, do not use it to train AI models, and delete or export it when you ask. The full terms are in our Data Processing Agreement.
-
Customer data rights
Export your inventory, customers and orders to Excel at any time. Account deletion removes your organisation’s data on request, subject to legal retention rules for tax documents.
Responsible disclosure
Found a vulnerability? Tell us.
If you believe you have found a security issue in Rentablez, email security@rentablez.com. Our contact details and policy are also published in machine-readable form at /.well-known/security.txt.
Include the steps to reproduce the issue and the account or organisation you tested with. We acknowledge reports, keep you informed while we investigate, and ask that you give us reasonable time to fix an issue before disclosing it publicly. Please do not access, modify or download data that belongs to other customers while testing.
Acknowledgments
We thank researchers who report issues responsibly. With your permission, we list your name here once the issue is fixed.
For questions that are not security reports, see the Privacy Policy and the Data Processing Agreement, or write to support@rentablez.com.
FAQ
Security questions
The questions procurement and IT teams ask before signing up.
Something else? or email sales@rentablez.com.
Is my data encrypted?
Yes. All traffic between your devices and Rentablez is encrypted in transit with TLS, and stored data, uploaded documents and backups are encrypted at rest.
Can another company using Rentablez see my data?
No. Rentablez is multi-tenant, and every record is scoped to your organisation at the data layer. Within your organisation, role-based access control decides which staff can see which screens and branches.
Is Rentablez SOC 2 or ISO 27001 certified?
Not today. Our security controls are aligned to SOC 2 and ISO 27001 principles, and we can share our Data Processing Agreement and answer security questionnaires for procurement reviews. We will update this page if that changes.
Are backups taken, and can I get my data out?
Databases are backed up automatically on a schedule and encrypted. You can export inventory, customers, orders and reports to Excel at any time, and request a full export or deletion of your organisation’s data.
How do I report a security vulnerability?
Email security@rentablez.com with the details, or use the contact information published at rentablez.com/.well-known/security.txt. We acknowledge reports, keep you informed while we investigate, and ask that you give us reasonable time to fix an issue before disclosing it publicly.
Walk through security with your own questions
Book a 30-minute demo. Bring your security questionnaire, and we will answer it on the call before your 7-day free trial starts.