Trust & Security
How we protect your data, your money, and your guests.
Payments
All payments processed by Stripe, which is PCI DSS Level 1 certified. RentalBot never touches card data.
Funds flow directly from guest to host via Stripe Connect. RentalBot holds nothing.
Strong Customer Authentication (3D Secure) automatically applied when required.
Guests & Identity
Stripe Identity verifies government ID + selfie before guests can pay. Hosts can require this per booking, per property, or for all stays.
Hosts are verified via Stripe Connect KYC before they can collect payments, protecting guests from rental scams.
Payments run on the host's own Stripe account, so a chargeback is raised against the host as the merchant. Stripe manages the dispute process, and the booking record, guest details, and confirmation are there to submit as evidence.
Data protection
All traffic over TLS 1.2+. HTTPS-only across the platform.
Passwords hashed with bcrypt (cost factor 12). We never store plaintext credentials.
Database connections encrypted in transit, backups encrypted at rest.
JWT-signed sessions, refresh tokens rotated on every use.
Subprocessors
Compliance
RentalBot is currently working toward SOC 2 Type II certification. Enterprise customers and property managers can request our current security posture under NDA.
Have a security question or want to report a vulnerability? Email security@rentalbot.com.