Your data is protected
Lettable AI is built with security at its core. Your leases, obligations and financial data are protected by strong, industry-standard security measures at every step.
Encryption in transit and at rest
All data transmitted between your browser and our servers is encrypted using TLS 1.3 — the same standard used by major banks and financial institutions. Data stored in our database is encrypted at rest by our infrastructure provider.
Strict data isolation
Every account's data is isolated at the database level — not just in our application code. Row Level Security policies are applied to every table so an account's queries are scoped to its own data, never another customer's leases, documents or financial information. Our multi-tenant isolation is undergoing independent security review.
Australian data residency
Your account data and lease records are stored in Australia (Supabase, Sydney region) — supporting the Australian Privacy Act 1988 and data-sovereignty needs. The one exception: when a scanned lease needs OCR, that document is processed by our OCR provider (Mistral) outside Australia under a data-processing agreement; digital-text leases are read locally and never sent offshore.
AI processing — no training on your data
Lettable's AI features use Anthropic (Claude) for analysis and drafting, and Mistral for OCR of scanned leases, in each case under terms that do not use your data to train their models. Your input is processed and returned to you, not retained to improve their models. See our privacy policy for the full list of providers.
Secure authentication
User authentication is handled by Supabase Auth, an industry-standard authentication system used by thousands of production applications. Passwords are never stored in plain text, and session tokens are rotated regularly.
Private document storage
Lease documents and other files you upload are stored in a private storage bucket. Files can only be accessed by the authenticated user who uploaded them. Documents are never publicly accessible and cannot be accessed by other users or third parties.
Privacy Act compliance
Lettable AI is built in compliance with the Australian Privacy Act 1988. We collect only the data necessary to provide our service, store it securely in Australia, and give users the right to access, correct and delete their data at any time. Our full privacy policy is available at lettableai.com.au/privacy.
Security infrastructure
Questions about security?
If your organisation has specific security questions or requirements before bringing your leases onto Lettable, we're happy to discuss them directly.
Contact us →