Security you can actually verify.
FlintSpan is a newer product, but it runs on the same AWS foundation the large platforms use. We don't make claims we haven't earned. Here is exactly how your business and your renters' data are protected, in plain English.
Data protection
- Encrypted at restYour data is encrypted at rest, and encrypted in transit (TLS).
- Sensitive docs double-encryptedLicenses, insurance and signed agreements get per-document AES-256-GCM envelope encryption.
- Isolated per businessPostgres Row-Level Security keeps every rental company's data separate at the database level.
- Audited support accessIf our team ever needs to help inside your account, access is consented, time-boxed and fully audited impersonation.
- Privacy rights built inCCPA/CPRA data export and crypto-shredding are supported, so honoring a data request is a built-in process.
Legally binding
- Tamper-evident e-signed agreementsEvery signed agreement is a locked, SHA-256-fingerprinted, digitally signed PDF.
- Court-ready audit trailSigner, per-clause initials, IP, device, UTC timestamp and content hash - an ESIGN/UETA-aligned record.
Payments
- We never touch card dataPayments are tokenized in Stripe/Square, PCI SAQ-A. You stay merchant of record and keep 100% on any paid plan.
Reliability and scale
Enterprise-grade infrastructure, not a hobby site
- Backed up + geo-redundantAll your data is backed up across multiple regions, so your site stays available with minimal downtime.
- Scales as you growScaling technology keeps systems running fast and efficient as your business grows.
- Global CDN, always fastServed from a global edge network with HTTP/2 and HTTP/3 caching worldwide, so pages load fast everywhere.
- Firewall + abuse protectionA web application firewall screens every request and blocks common attacks, malicious traffic, and abuse before it reaches your site.
Questions about security?
Happy to walk you through any of this. Reach out and we'll answer honestly - including what we don't do yet.
FlintSpan