Security built into the workflow.
UnitSquad handles operational property information, documents, photos, communications and payment records. Our architecture is designed to limit access, keep private files private, isolate payment credentials and reduce unnecessary account sharing.
Property documents and uploaded evidence are stored in private storage rather than exposed through public file URLs.
Database access policies are designed so authenticated users can access only the workspaces they are authorized to use.
Tenant and vendor workflows use purpose-specific, expiring links that can be revoked instead of permanent portal accounts.
Guest-link tokens are stored as cryptographic hashes rather than retaining the original secret token in the database.
Private files are opened through temporary signed URLs rather than permanent public links.
Privileged database, AI, communications and payment-provider credentials are designed to remain on the server, not in the browser.
Tenant bank and card credentials are collected by the configured payment processor. UnitSquad stores operational payment records and processor identifiers rather than full bank-account or card numbers.
Payment-status updates are designed to arrive through signed processor webhooks before UnitSquad marks asynchronous payments such as ACH as settled.
Security without fake badges
We publish controls we actually use. UnitSquad does not currently claim SOC 2, PCI DSS, HIPAA or other third-party certifications that have not been completed. Payment providers may maintain their own certifications; those do not automatically become UnitSquad certifications. As the platform matures, this page will be updated with verified security and compliance information.
AI and human control
AI features are intended to organize information, assist with routine workflows and surface items for review. UnitSquad should not be used to make consequential housing decisions solely through automated AI output. Property managers remain responsible for decisions involving applicants, tenants, deposits, legal notices and similar matters.
Responsible reporting
If you believe you have found a security issue, do not attempt to access data that is not yours or disrupt the service. Our dedicated security contact will be published here as the UnitSquad business email migration is completed.