Letting

Letting security: encryption, roles, SSO and data export

Letting holds your tenants' details, your owners' money records and your team's work, so we treat security as part of the product. This page sets out how data is protected, who can see what, and how you can take your data with you at any time.

Run the demo

Encryption in transit and at rest

Every connection to Letting uses encrypted HTTPS, including the tenant request links, contractor links and the owner statements sent by email. Data stored in Letting, including documents, inspection photos and ledgers, is encrypted at rest.

  • HTTPS for every page, link and download
  • Encryption at rest for the database and stored files
  • Sign-in by one-time code sent to your email, so there is no password to leak

Daily backups

Letting backs up your data every day, so a mistake or a failure does not take your records with it.

Roles and permissions

Each team member signs in with their own account. Roles for director, manager, accounts and maintenance decide what each person can see and change, so maintenance staff see work orders, not owner payouts. On Enterprise, custom roles let you define permissions to match your own structure.

  • Built in roles: director, manager, accounts, maintenance
  • Custom roles on Enterprise
  • Tenants and contractors reach only their own request or job through their link

Activity log and audit log

Every record keeps an activity log showing who changed what and when. On the Portfolio plan and above, an audit log covers the whole account, which helps when an owner asks who approved a repair or changed a rent amount.

Single sign-on with SAML on Enterprise

On Enterprise, your team signs in through your identity provider with SSO (SAML). When someone leaves, you switch off their access in one place.

Your data, exportable at any time

Your data belongs to you. Owner statements export as PDF and CSV, income and expenses export on every plan, and Enterprise adds API access and full data export. If you cancel, you take your records with you.

  • CSV and PDF exports on every plan
  • API access and full data export on Enterprise
  • Cancel any time, keep your data

DPA and security questionnaire on Enterprise

Enterprise includes a data processing agreement (DPA) and completion of your security questionnaire, together with an uptime SLA and invoicing by bank transfer. To start a security review, talk to our sales team.

Report a vulnerability

If you believe you have found a security issue in Letting, email [email protected] with the details and the steps to reproduce it. Please do not access data that is not yours, do not disrupt the service while testing, and give us reasonable time to fix the issue before sharing it with anyone else. Include your contact details so we can ask follow up questions. We read every report and reply to the address you write from.

See the product before you sign in

Our homepage demo runs a month end on a demo portfolio in your browser, with no account and no personal data.

Security on every plan

Encryption, daily backups, roles and exports are part of every plan, from $59 per month. SSO, custom roles, the DPA and the security questionnaire come with Enterprise. See property management software pricing.

Yes. Data is encrypted in transit with HTTPS and encrypted at rest, including documents and inspection photos.

Every day, for every account on every plan.

Yes, on Enterprise. Your team signs in through your identity provider using SAML.

Yes. Exports in CSV and PDF are available on every plan, and Enterprise adds API access and full data export at any time.

Yes, on Enterprise, together with your security questionnaire. Talk to sales to start.

Put your portfolio on a system you can trust

Encryption, roles, backups and your data always exportable.