Security & trust

Your application data is hosted in Australia — the database, your documents and your media (including inspection photos and video) all sit on Supabase (AWS, Sydney). Some providers process limited data overseas (payments and email); we list each provider and its location in our Privacy Policy.

Data is encrypted in transit (TLS) and at rest across our database, document store and media storage. On top of that infrastructure layer, the details tenants pay rent into — BSB, account number and PayID — are encrypted by the application itself (AES-256-GCM) before they are written to the database, with the key held outside it. A copy of the database on its own therefore contains no usable account details.

Every request is scoped to the signed-in account: a landlord only ever accesses their own properties, tenancies and records, and the tenant portal is scoped to a single tenancy. We use short-lived signed links for media and rotating tenant portal tokens — private files have no permanent public URL.

Rent is paid by the tenant directly to the landlord — bank transfer or PayID, account to account. LandlordMate only records and matches those payments; we never collect, hold, control or access rent funds. Our own charges (subscriptions and verification fees) are processed by Stripe Payments Australia Pty Ltd (AFSL 500105), a PCI-DSS Level 1 certified provider — card details are captured by Stripe and never touch our systems.

To be clear about the one thing we do store: the account a landlord nominates to receive rent (account name, BSB, account number, PayID) is kept, encrypted, because the tenant has to be told where to pay. Those are pay-to details, not credentials — they authorise nothing on their own, and we hold no direct-debit authority over any account. Changing them triggers a 24-hour cooling-off and a security email, because that is the classic fraud target.

There is no identity-document upload anywhere in LandlordMate, for landlords or for renters. Identity is always proved with the provider: you photograph your ID and take a selfie directly with Stripe Identity, on your own device. Stripe tells us whether it checked out, and the name it read. The document and the selfie never reach us, so there is nothing here for a breach to expose.

Landlordsverify once, at signup — it's what unlocks adding a property, inviting a renter and advertising. Applicantsare only ever asked after they've been shortlisted, and the landlord pays. If a landlord sights ID in person instead, we record the document type and the date — never a copy, never a number.

We also make no claim about who is on a property's title. The badge on a listing says the person advertising it is a verified, named individual; it does not say we checked the land register.

Our infrastructure runs on providers that maintain independent security certifications — AWS (via Supabase), Cloudflare and Stripehold certifications such as ISO 27001, SOC 2 and PCI-DSS. LandlordMate does not yet hold its own ISO 27001 / SOC 2 certification; we build on infrastructure that does.

Tenancy records — ledgers, messages, notices, condition reports and inspection records (photos and videos) — are kept as dated, unalterable evidence for the life of the account plus seven yearsafter a tenancy ends. That reflects the bond and tribunal/court limitation periods (up to six years in most states), so the condition evidence is available if a dispute arises long after the tenancy — we don't delete it after 90 days. Identity documents and card details are never stored at all, so they have no retention period.

If a breach is likely to result in serious harm, we notify the affected people and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme, as soon as practicable.

Found a security issue? Please email admin@landlordmate.com.au. We'll acknowledge your report and work with you in good faith — please give us a reasonable chance to fix an issue before disclosing it publicly.