Our Commitment to Data Security

At RentalTide, safeguarding your data is our top priority. We leverage the robust infrastructure of Amazon Web Services (AWS) to ensure that your information is protected with the highest standards in the industry. Our services are built on key AWS technologies including DynamoDB, Lambda, S3, and Elastic Beanstalk, which are deployed across multiple regions—US West 2, US East 1, EU West 3, and AP Southeast 2—to guarantee high availability, resilience, and disaster recovery.

Key Security Features:

• Advanced AWS Infrastructure:
  Our platform is hosted on AWS, ensuring that your data benefits from a secure, scalable, and highly available environment.

• Geographical Redundancy, Low Latency & Data Residency:
  By deploying our services across multiple locations, we ensure continuous service availability and robust data protection against localized disruptions. This global distribution minimizes latency, ensuring optimal performance regardless of your location. Additionally, we strictly comply with EU privacy laws and regulations by storing and processing all EU customer data exclusively on our AWS servers in Paris, ensuring full adherence to GDPR and other European data protection standards.

• Encryption & Secure Data Handling:
  All data is encrypted both in transit and at rest, following industry best practices to ensure confidentiality and integrity.

• Strict Access Controls:
  We enforce rigorous access controls and continuous monitoring to prevent unauthorized access and quickly address any potential vulnerabilities.

• Elastic Beanstalk & VPC Security:

  • Isolated Environments: Our applications are deployed using AWS Elastic Beanstalk within an Amazon Virtual Private Cloud (VPC), providing a secure, isolated environment where resources are shielded from direct public exposure unless explicitly configured.
  • Private Subnets & Controlled Access: Critical components and backend services reside in private subnets, accessible only through secure, authorized connections to minimize potential attack vectors.
  • Security Groups & Network ACLs: We utilize security groups and network access control lists (ACLs) as virtual firewalls, strictly regulating traffic to ensure only necessary and authorized interactions occur between components.
  • Seamless Integration: Elastic Beanstalk integrates effortlessly with other AWS services, such as DynamoDB, Lambda, and S3, ensuring that data exchanged between services remains protected through secure VPC endpoints and routing.

• API Security & Geo-Locking:

  • Robust Authentication: Our APIs are secured using Auth0, providing a robust authentication framework that ensures only authorized users have access to our services.
  • Rate Controls & Geo-Locking: We implement strict rate controls to prevent abuse and maintain optimal performance. Additionally, geo-locking measures are in place to restrict access based on geographic location when necessary, further enhancing security.

• Payment & ID Verification Security:
  Sensitive payment information and ID verification data are hosted by Stripe—a trusted, industry-leading provider. Stripe processes, stores, and secures your financial and identification data in compliance with rigorous security standards and regulatory requirements, ensuring that your transactions and personal information remain protected.

• SOC 2 Practices & Rapid Vulnerability Patching:
  While we do not currently hold a SOC 2 certification, we closely adhere to SOC 2 practices to ensure the highest standards of security, availability, processing integrity, confidentiality, and privacy. Additionally, our proactive vulnerability management process ensures that any identified vulnerabilities are patched within 7 days—an industry-leading commitment to keeping our systems secure.

• Robust Backups, Redundancy & Deletion Protection:
  We implement comprehensive backup strategies and redundancy protocols to safeguard your data. Our robust backup systems ensure that your data is consistently protected and can be rapidly restored if necessary. Additionally, deletion protection measures are in place to prevent accidental or unauthorized data loss, providing an extra layer of security and data integrity.

• Team Expertise:
  Our team brings extensive experience in cloud and physical security, payment processing, and artificial intelligence. This diverse expertise enables us to implement robust security measures, manage secure payment integrations, and responsibly leverage AI-driven insights—all while maintaining the highest standards of data protection.

• Service Uptime & Transparency:
  We are committed to providing a reliable service with a 99.9% uptime guarantee. You can monitor our system status in real-time at status.rentaltide.com.

• Customer-Controlled Data Retention & Responsible Data Usage:

  • Custom Data Retention (TTL): We empower our customers by allowing them to set a custom Time-to-Live (TTL) for their data, giving you full control over how long your information is stored.
  • Data Privacy & AI-Driven Insights: We do not sell your data. Instead, we responsibly apply modal AI techniques to analyze and derive insights from your data—strictly to improve our services and enhance your experience. All AI-driven processes are governed by stringent privacy and security guidelines to ensure that your data is used solely for your benefit.

• Compliance & Continuous Improvement:
  Leveraging AWS’s industry-leading security and compliance certifications, we continuously review and enhance our security practices to meet evolving standards and regulatory requirements.

Your trust is essential to us, and we are committed to maintaining the highest levels of security for your data.