Trust & Security
How we protect your data, your money, and your guests.
Payments
All payments processed by Stripe — PCI DSS Level 1 certified. RentalBot never touches card data.
Funds flow directly from guest to host via Stripe Connect. RentalBot holds nothing.
Strong Customer Authentication (3D Secure) automatically applied when required.
Guests & Identity
Stripe Identity verifies government ID + selfie before guests can pay. Hosts can require this per booking, per property, or for all stays.
Hosts are verified via Stripe Connect KYC before they can collect payments — protecting guests from rental scams.
Stripe handles all chargeback disputes. Hosts are never responsible for fraudulent transactions.
Data protection
All traffic over TLS 1.2+. HTTPS-only across the platform.
Passwords hashed with bcrypt (cost factor 12). We never store plaintext credentials.
Database connections encrypted in transit, backups encrypted at rest.
JWT-signed sessions, refresh tokens rotated on every use.
Subprocessors
Compliance
RentalBot is currently working toward SOC 2 Type II certification. Enterprise customers and property managers can request our current security posture under NDA.
Have a security question or want to report a vulnerability? Email security@rentalbot.com.