Effective: September 2026
Encryption in transit: All traffic to and from RealAnalyticsPro is served over HTTPS via Vercel.
Encryption at rest: Our database is hosted on Neon, with all data encrypted at rest.
Authentication: Passwords are hashed using bcrypt via NextAuth.js and are never stored in plain text. Session tokens are managed securely by NextAuth.js.
Payment security: All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor. We never store credit card numbers or bank account credentials on our servers.
Rate limiting: We use Upstash to rate-limit requests and protect the platform from abuse.
Data isolation: Landlord data is strictly scoped at the database level, so no user can view or modify another user's properties, tenants, or financial data.
If you believe you have discovered a security vulnerability in RealAnalyticsPro, please report it to info@realanalyticspro.com with the subject line "Security Vulnerability Report." We will acknowledge your report within 48 hours.
In scope: realanalyticspro.com and its subdomains, the RealAnalyticsPro web application, and its API.
Out of scope: Third-party infrastructure providers we rely on, including Stripe, Vercel, and Neon. Please report vulnerabilities in those services directly to their respective security teams.