Bank-Grade Protection for Your Ledgers, Documents & Identity
RentKhata employs layered security safeguards, cryptographic tenant document isolation, and 100% sovereign Indian cloud residency. Here is how we ensure your property operations remain confidential, tamper-proof, and audit-ready.
Our Practical & Transparent Philosophy
Security is an ongoing operational discipline, not a one-time checklist. We deploy defense-in-depth safeguards, audit access logs, and continually refine our software protections as RentKhata expands. We articulate controls accurately without marketing hyperbole.
Six Architectural Safeguards Protecting RentKhata
From network transit to database disk arrays, every layer of the RentKhata stack is architected to prevent unauthorized access and data loss.
Encrypted Connection (TLS 1.3 & HTTPS)
All communications between your browser, mobile application, and RentKhata cloud APIs are secured using TLS 1.3 with Perfect Forward Secrecy (PFS). Strict HTTP Strict Transport Security (HSTS) prevents packet inspection, downgrade attacks, and man-in-the-middle interception.
Account Authentication & Cryptographic Hashing
User credentials are defended with one-way salted Argon2id / bcrypt cryptographic hashing. Passwords are never stored or logged in plaintext. Web and mobile sessions utilize short-lived JWTs paired with cryptographically randomized refresh tokens.
Private Document Access & Signed URLs
Tenant Aadhaar proofs, lease agreements, and landlord tax filings are stored in strictly private, isolated cloud buckets with zero public internet access. Authorized requests generate time-limited (15-minute) cryptographic pre-signed URLs that expire automatically.
Authorized Account Controls & Granular RBAC
Multi-tenant data architecture enforces absolute boundary separation between organizations. Granular Role-Based Access Control (RBAC) ensures property owners, PG branch managers, wardens, and residents access only data strictly permitted for their role.
Upload Verification & Sandboxed Inspection
All user-uploaded tenant documents, sub-meter electricity photos, and expense bills undergo MIME type inspection, file extension verification, and strict size caps (up to 10MB). Uploads are safely stored in sandboxed storage with non-executable permissions.
Privacy-Minded Sovereign Data Residency
100% of RentKhata primary database clusters, cache nodes, and backup archives reside strictly within MeitY-empaneled sovereign Indian data centers (Mumbai and Hyderabad regions), guaranteeing total compliance with the Digital Personal Data Protection (DPDP) Act 2023.
Your Role in Keeping Property Data Safe
While we maintain rigorous cloud safeguards, securing your property ecosystem is a collaborative effort between RentKhata and property administrators.
Unique Passwords & OTPs: Never share verification codes or passwords across staff or third-party agents.
Consent for Tenant KYC: Obtain explicit tenant agreement before uploading Aadhaar or identity proofs to the portal.
Role Scoping: Assign restricted "Staff" or "Warden" roles instead of sharing master Owner credentials.
Sign Out Shared Kiosks: Always log out after accessing the ERP on shared property reception computers or cybercafes.
Have a Security Concern or Finding?
If you believe you have discovered a vulnerability or have inquiries regarding our data handling protocols under the DPDP Act 2023, please reach out directly to our security response team.