We take your landlords' trust seriously.
Renty360 handles real money and real relationships. Here is how we keep your data and your tenants' data safe.
Encrypted in transit and at rest
All data is encrypted using TLS 1.3 in transit. Sensitive fields are encrypted at rest. Your tenants' M-Pesa numbers are never stored in plain text.
M-Pesa via the official Daraja API
We never touch your M-Pesa credentials. The STK push flow uses Safaricom's official OAuth2-secured Daraja API. Tokens are scoped and short-lived.
Audit log on every important change
Every change to payment settings, roles, and billing is logged with a timestamp and the user who made it. You can export the log at any time.
Hosted on AWS in the Africa (Cape Town) region
Your data doesn't leave the continent unless you ask it to. Backups run every 6 hours, retained for 30 days.
Tenant data belongs to tenants.
Renty360 processes tenant data on behalf of landlords to deliver the service. We do not sell tenant data. We do not share it with advertisers. Tenants can request a copy of their data at any time by contacting us.
M-Pesa transaction data is provided to us by Safaricom via the Daraja API for the sole purpose of reconciling invoices. It is not used for any other purpose.
Found a vulnerability? Email security@renty360.com.
Questions about security?
We're a small team. A real person will reply.