Security

Each workspace belongs to one customer business. Our servers check every request against the signed-in person's active membership, or authorized RentalSpend support access (below); a link, an address in the browser or a vendor email address never grants access by itself.

Active members can view the workspace's records and original evidence. Admin-only actions, such as approving a packet or accepting commercial terms, stay with Customer Admins. Removing a member ends their access without erasing the business's records.

Original files are kept in private storage. They are shown only through access-checked requests that our servers fulfil; no public or shareable link to a file is created. Uploads are limited to supported file types and sizes.

Every uploaded file is scanned for malware, and PDF files are checked for active content such as scripts, embedded files and encryption, before the file can be read or shown. A file that doesn't pass stays blocked. These checks reduce risk; no scanner can guarantee that every threat is detected.

Document contents are treated as data, never as instructions. AI reads supported documents and can add an advisory review of a finding; it can't approve packets, contact vendors, move money or change a calculated amount. Defined checks calculate each discrepancy and cite the sources they used.

The Privacy Policy lists the providers involved and what they receive.

Authorized RentalSpend staff can open a customer workspace for support and operations. That access is recorded in our internal logs, and changes made through it are labeled as RentalSpend support in the workspace. Support access can't approve or send your packets, change billing or record credits on your behalf.

Card details are entered on Stripe's hosted pages; RentalSpend doesn't receive or store full card numbers. A subscription is confirmed by the payment provider's records, not by a redirect back to our site.

RentalSpend doesn't hold a security certification and doesn't promise a guaranteed backup recovery time. No online system is perfectly secure. If your review needs more detail, request a demo or ask us through Contact.

If you believe you've found a vulnerability, tell us through Contact. Please don't access other customers' data, disrupt the service or run automated scans against it; coordinate with us first.