Security

Your data is protected

Lettable AI is built with security at its core. Your commercial property portfolio, lease documents and financial data are protected by bank-grade security at every step.

End-to-end encryption

All data transmitted between your browser and our servers is encrypted using TLS 1.3 — the same standard used by major banks and financial institutions. Data stored in our database is encrypted at rest. Even if someone physically accessed our servers they could not read your data.

Strict data isolation

Every user account has strict data isolation enforced at the database level — not just in our application code. It is technically impossible for one user to access another user's portfolio data, lease documents or financial information. Row Level Security policies are applied to every table in our database.

Australian data residency

Your data is stored exclusively in Australia — Sydney region. It never leaves the country. This is important for compliance with the Australian Privacy Act 1988 and for clients with data sovereignty requirements. Our infrastructure runs in the Sydney region to ensure your data stays on Australian soil.

AI processing — no training on your data

Lettable's AI features are powered by a leading enterprise AI provider under an enterprise privacy agreement that explicitly prohibits using customer data to train their models. When you upload a lease document or ask a question about your portfolio, that data is processed and returned to you — it is never retained by the provider or used to improve their models.

Secure authentication

User authentication is handled by a battle-tested, industry-standard authentication system used by thousands of production applications. Passwords are never stored in plain text. Session tokens are rotated regularly. We support secure email and password authentication with plans to add multi-factor authentication.

Private document storage

Lease documents and other files you upload are stored in a private storage bucket. Files can only be accessed by the authenticated user who uploaded them. Documents are never publicly accessible and cannot be accessed by other users or third parties.

Privacy Act compliance

Lettable AI is built in compliance with the Australian Privacy Act 1988. We collect only the data necessary to provide our service, store it securely in Australia, and give users the right to access, correct and delete their data at any time. Our full privacy policy is available at lettableai.com.au/privacy.

Security infrastructure

Database
Enterprise cloud — Sydney, Australia
Encryption
TLS 1.3 in transit, AES-256 at rest
Authentication
Industry-standard auth with JWT tokens
AI processing
Enterprise AI provider (no training)
Hosting
Global edge CDN with DDoS protection
Data residency
Australia only
Access control
Row Level Security on all tables
Compliance
Australian Privacy Act 1988

Questions about security?

If you have specific security questions or requirements — particularly for enterprise or fund clients — we're happy to discuss them directly.

Contact us →