Security and privacy for the work that keeps properties moving.

01 / 13

Security Overview

TenantPoint maintains a formal security program for the product and periodically reviews relevant risks and controls. Our approach includes role-based access controls, workspace isolation, server-side authorization, encryption in transit, secure development and testing practices, and separation between production and non-production environments.

02 / 13

Data Protection

Customer data is organized by workspace. TenantPoint uses Row Level Security and server-side authorization to help ensure users can access only the information their role and workspace permit.

03 / 13

Encryption

• TenantPoint uses HTTPS/TLS to protect data in transit.
• Sensitive integration credentials are encrypted server-side at rest.
• Provider access tokens are not exposed to browser clients.
• Production secrets are stored outside source control.

04 / 13

Authentication & Access

TenantPoint requires authenticated access to product workspaces. Role-based permissions, workspace isolation, least-privilege practices, and restricted administrative access help govern how customer information is accessed.

05 / 13

Infrastructure

TenantPoint uses managed production infrastructure for hosting, application delivery, data storage, and authentication. Production and non-production environments are kept separate to support safer development and testing.

06 / 13

Backups & Recovery

TenantPoint maintains backup and recovery procedures appropriate to its production environment and periodically reviews recovery readiness.

07 / 13

Secure Development

Security is considered throughout design, development, review, and testing. TenantPoint uses code review, automated checks, dependency maintenance, and testing practices intended to identify issues before changes are released.

08 / 13

Privacy

TenantPoint does not sell personal information. Our Privacy Policy explains the information we collect, how we use it, and how to request help with privacy or deletion questions.

09 / 13

Subprocessors

TenantPoint lists active production service providers below. Optional or future integrations are added only when they are enabled for production use.

10 / 13

Incident Response

TenantPoint maintains an internal process for assessing and responding to security events. We will communicate with affected customers when notification is appropriate under applicable law and our contractual commitments.

11 / 13

Responsible Disclosure

To report a potential security issue, email hello@tenantpoint.co or use our contact form. Please do not access data that is not yours or disrupt the service. TenantPoint plans to establish a dedicated security reporting address before relying on a separate public security inbox.

12 / 13

Compliance & Assurance

TenantPoint maintains an internal security program and is continuously improving its security and compliance posture. TenantPoint is not currently SOC 2 certified, ISO 27001 certified, or PCI DSS certified. Formal third-party certifications will be added here if and when obtained.

13 / 13

Security FAQ