Secure Living

Security

256-bit SSL/TLS

Built to protect rent, deposits, and personal documents

Secure Living handles sensitive financial and identity data for landlords and tenants across Kenya — here is how we protect that trust.

Authentication & Access Control

Every account is protected by role-based access control. Permissions are assigned per role — landlord, agency, property manager, tenant, staff, or admin — and every API request is checked against the caller's exact permission set and organization/branch scope before any data is returned or changed. No user can see records outside what their role and assignments allow.

Data Protection

Passwords are never stored in plain text — they're hashed with scrypt and a unique random salt per account, and verified using constant-time comparison to resist timing attacks. All traffic between your browser and Secure Living is encrypted in transit (256-bit SSL/TLS).

Audit & Accountability

Sensitive actions — lease changes, deposit deductions, KYC decisions, dispute resolutions, organization approvals, and more — are written to an immutable audit trail with who did what and when. This trail backs both internal reviews and the activity feeds admins see in their dashboards.

Compliance & Verification

Properties, agents, and tenants can carry a unique Secure Living compliance number, and identity/KYC documents go through a structured review queue before an account is marked verified. This gives everyone on the platform a way to check who they're really dealing with.

Responsible Disclosure

If you believe you've found a security vulnerability in Secure Living, we want to hear from you. Please report it privately and give us a reasonable opportunity to investigate and address it before any public disclosure.

  • • Email us at the address below with a clear description and steps to reproduce.
  • • Avoid accessing, modifying, or deleting data that isn't yours in the course of testing.
  • • Give us a reasonable window to respond and remediate before sharing details publicly.

We aim to acknowledge reports within a few business days, and we won't pursue legal action against good-faith researchers who follow these guidelines.

hello@secureliving.com

Have a security question?

Our team can walk you through how your data is handled.