Security

• Every connection to the site is encrypted.
• Everything you enter in your books is backed up automatically every day.
• Passwords are never stored as you type them. They are scrambled first, so not even we can read them.
• Repeated wrong sign-in attempts are blocked for a while, which stops password guessing.
• You can add a sign-in code by email or an authenticator app, and owners can require an authenticator app for everyone in the business.
• Each business’s books are kept separate. Only its members can see its records, receipts, and leases.
• Uploaded receipts and leases are checked to be real PDFs or images before they are saved.
• Removing anything takes a second, deliberate confirmation.

Your password is scrambled before it is saved, so it is never stored in readable form. If an email or password is wrong, we do not say which one, so no one can use the sign-in page to find out who has an account. After too many wrong attempts, sign-in is paused for up to 15 minutes.

Passwords must be 8 to 100 characters long and include an uppercase letter, a lowercase letter, a number, and a symbol. You need your current password to change it, and the new one must be different.

If you forget your password, we email you a 6-digit code that works for 10 minutes. Resetting your password signs you out on all your other devices.

After you sign in, you stay signed in on that device for up to 14 days, or until you sign out. Changing your password, resetting it, or changing your sign-in code settings signs you out everywhere else.

Every time you open a page, we check that you are still a member of that business. If an owner removes you, you lose access straight away.

For extra protection, turn on sign-in codes. After your password, we will email you a 6-digit code to finish signing in. You can also use an authenticator app on your phone, and owners can require one for everyone in their business.

Every house, apartment, payment, tenant, lease, and report belongs to one business. Members of one business can never see another business’s records or files. Each time a lease or receipt is downloaded, we check again that the person belongs to that business.

Leases and receipts can be PDFs or photos (JPEG, PNG, or WebP) up to 10 MB each. We check each file’s actual contents, not just its name, to make sure it is a real document or image. Files are stored privately with your business and are never available at a public web address.

Deleting a payment, apartment, house, category, file, or teammate takes two steps, and the last step asks you to type DELETE. This prevents accidental removals. The Rent category and the Whole building entry are always kept, and every business always has at least one owner.

Everything you enter in your books, including your houses, tenants, payments, and reports, is backed up automatically every day. These protections are designed to keep your books private and to guard against mistakes and misuse. Even so, no online service can promise that it will never be interrupted, so we also recommend downloading copies of your ledger and reports from time to time and keeping your original documents.

The live demo is shared with everyone who opens it and resets every night, so please never enter real personal information there.

• Choose a strong password that you do not use anywhere else.
• Turn on sign-in codes from Your sign-in.
• Invite only people who need to see your books, and remove them when they no longer do.
• Sign out when you use a shared computer.
• Download copies of your ledger and reports from time to time.

To learn what information we keep and who can see it, read our Privacy Policy.

If you think someone has accessed your books without permission, change your password and contact us right away. Tell us the business name and what you noticed. Please do not send tenant files unless we ask for them.

Email support@simrentrec.com.