Security
Last updated: June 18, 2026
Data protection
OneRental uses administrative, technical, and organizational safeguards designed to protect sensitive personal and financial information, including encryption at rest for sensitive fields and encrypted connections in transit. Access to customer data is limited by account authentication, organization membership, and role-based permissions.
Account security
OneRental supports modern sign-in protections, including two-factor authentication and passkeys where available. Customers are responsible for keeping their own accounts, devices, and team access secure.
Privacy controls
Tenants can request access, correction, export, or deletion of personal information, subject to legal and contractual retention requirements. Security-relevant activity is logged to support investigation and compliance.
Retention
OneRental keeps records only as long as needed for the service, security, legal obligations, dispute handling, or tenant-screening requirements. Expired records may be deleted according to our retention practices, though backup copies may persist until overwritten through normal backup rotation.
Incident response
If we identify a security incident involving personal information, we investigate, contain the issue, assess impact, and provide notices where required by applicable law. No method of transmission or storage can be guaranteed to be completely secure.
Responsible disclosure
If you believe you have found a security issue, please report it privately through support with enough detail for us to assess it. Do not publicly disclose security issues, run intrusive testing, or access, modify, download, or share any data.
Contact
Security questions and reports can be submitted through the Support page.