SECURITY BUILT IN

Protect your tenancy records from day one.

Run your rental operations on AWS infrastructure with AES-256 encryption at rest, TLS 1.2+ in transit, company-level data isolation, role-based access and optional 2FA — active from the start of your trial.

14 days free · No credit card required

  • AWS infrastructure
  • AES-256 at rest
  • TLS 1.2+ in transit
  • Roles + optional 2FA

PROTECT SENSITIVE RENTAL DATA

Security that works in the background.

TenancyDesk protects agency, landlord and tenant records while your team keeps moving every tenancy forward.

Encrypted at rest and in transit

Database records, files and backups are encrypted at rest through AWS storage-layer encryption. Data sent between your browser and TenancyDesk uses TLS 1.2+.

Each agency stays separate

Company-level access controls and application-enforced data isolation keep each agency workspace separate.

Your team sees what it needs

Assign one of five predefined roles, add optional two-factor authentication and revoke sessions when access changes.

LAYERED PROTECTION

Prevent, detect and recover.

Security controls protect the application before an issue, surface critical activity and support recovery when it matters.

Reduce common attacks

Server-side validation, CSRF protection, secure output handling, security headers and per-client rate limits reduce common web and abuse risks.

Monitor the platform

AWS monitoring and automated alerts help surface service and security issues, while dependency and vulnerability scans check the software TenancyDesk relies on.

Record the actions that matter

Critical business actions are captured in audit trails with user and time context, helping your agency review changes and export evidence when needed.

Recover from encrypted backups

Encrypted automated backups and point-in-time database recovery help restore operations after an incident.

PRIVACY BY DESIGN

Your data stays under your control.

Use document automation and collaboration features without turning your rental records into someone else's product.

AI processing transparency

Our Privacy Policy identifies the service providers that may process documents for AI-assisted workflows and explains the safeguards that apply.

Never sold for marketing

We never sell or rent customer data, or share it with third parties for advertising.

Take your records with you

Export your business records in supported formats and keep control of the operational history your agency creates.

Read the Privacy Policy

ACCESS CONTROL

Built for teams. Ready for Enterprise.

Start with clear roles and two-factor authentication, then add centralized sign-in as your organization grows.

Every TenancyDesk workspace

  • Five predefined roles
  • Optional TOTP two-factor authentication
  • Backup codes
  • Secure, revocable sessions
  • Company-level data isolation
  • Audit trails for critical business actions
Start Free Trial

Enterprise access controls

  • SAML 2.0 single sign-on
  • Enterprise API and webhook controls
  • Deployment requirements defined with your agency
Talk to Sales

Enterprise capabilities are configured with your agency and are not part of the standard self-serve trial.

COMMON QUESTIONS

Security questions, answered.

The essentials your agency needs before starting.

Which security controls are active during the free trial?
AES-256 encryption at rest, TLS 1.2+ in transit, company-level data isolation, five predefined roles, optional 2FA, secure sessions and audit logging for covered critical actions are active from the start of your trial. SAML 2.0 SSO is available on Enterprise.
Can another agency access my workspace?
No. TenancyDesk enforces company-level data isolation at the application layer, and authenticated access is scoped to the user's agency workspace.
How is AI-assisted document processing governed?
TenancyDesk documents the providers that may process data for AI-assisted workflows in its Privacy Policy and subprocessor information. Any claim about model training or retention must match the provider, route and account controls actually used in production.
Can I control what each team member can see and do?
Yes. Assign Admin, Manager, Team Lead, Agent or Property Administrator roles, enable optional 2FA and revoke sessions when team access changes. Enterprise organizations can also configure SAML 2.0 SSO.
Where is production data hosted?
Production data is hosted on AWS in its Frankfurt, Germany region and encrypted at rest and in transit. Our Privacy Policy documents cross-border data flows, safeguards and the service providers used to deliver TenancyDesk.

Start with security already built in.

Protect your agency's rental records from day one — without adding another security setup project.

14 days free · No credit card required