Soofair

Security

How Soofair Property keeps your business's records safe, in plain words. Everything here is true of the app today.

Your business is walled off

Every record carries the business it belongs to, and the database itself refuses to show or change another business's rows. The wall is in the database, not only in the app's screens, and it is tested on every change to the code.
A tenant using the Tenant app sees only their own lease, rent, receipts, messages and requests, never another tenant's.
Each person on your team sees and does only what their role allows. You choose the roles.
Soofair's own staff see your records only when you let them, read-only and for at most 7 days, and each time they look it shows in your Who did what.

Passwords are never stored: only a scrypt hash of each, which cannot be turned back into the password.
You can sign in with a passkey instead: your face, fingerprint or screen lock, with nothing to type or steal.
On a browser you have not used before, the right password is not enough: we email a 6-digit code that works once, for 10 minutes. You can trust that browser for 30 days.
A sign-in ends after 7 days without use and after 30 days at most. Settings lists every device you are signed in on, and signs any of them out.

Money is kept in a ledger that is only ever added to. A mistake is corrected by a reversal with a reason, never by editing or deleting the original.
Who did what, and when, is recorded for every change to your business's records, and the owner can read it.
Signed contracts and move-in and move-out reports keep the exact words signed, with a fingerprint of the text.

Photos and documents are stored privately. Each one is shown only to a signed-in person allowed to see it, and is never cached.
If you connect PayMongo, your secret key is sealed with AES-256-GCM before it is stored, and never shown again.
Every page and file travels over an encrypted connection (HTTPS).

The whole database is copied every night to separate storage, checked after upload, and kept for 35 days. A copy cannot be deleted or replaced for its first 30 days, and restoring one has been tested.
The owner can download everything the business keeps, as spreadsheets in one file, at any time: Settings, Export your business.
The owner can delete the business. It turns read-only at once and is erased 30 days later: its records, its files and the sign-ins used for nothing else. Soofair keeps only its own invoices to the business and a note of when it was erased. The nightly copies that still hold it expire within 35 days after that.

Found a security problem? Email hello@soofair.com. We answer every report.