Security Built Into the Architecture, Not Bolted On
Rental Wizard is built on a multi-tenant architecture where every tenant’s data lives in its own isolated database, provisioned automatically when an account is created.
That isolation is structural, not just a permissions setting — not a shared table filtered by a company ID that a bug or misconfiguration could expose across tenants.
Data Isolation
Each tenant’s data lives in a dedicated database, created automatically at signup and never shared with other tenants’ data at the storage layer.
Access Control
Role-based access control (RBAC) governs what each user within a tenant account can see and do, with branch-level restrictions available for multi-branch operations.
Encryption
Data is encrypted in transit [CONFIRM: TLS 1.2+/1.3]. [ADD ENCRYPTION-AT-REST DETAILS ONCE CONFIRMED WITH YOUR HOSTING PROVIDER]
Approval Workflows
Sensitive actions — payroll posting, procurement approval, contract signing — are gated behind explicit approval steps with an audit trail, not open to any user by default.
Audit Trails
Key actions across the platform (negotiations, contract changes, payroll adjustments) are logged with who made the change and when.