Your records, and nobody else's
Latchly holds rent, addresses, leases and photographs of people's homes. Here is plainly how that is kept apart and kept private.
Accounts cannot see each other
This is the one that matters most, so it is built in twice.
Every record knows who owns it
Each row in the database carries the account it belongs to, even where that could be worked out another way. A query that forgets to check still cannot cross into another account.
Missing beats forbidden
Ask for a record belonging to someone else and Latchly says it does not exist, rather than that you are not allowed. You learn nothing about what is there.
It is tested, not assumed
An automated test signs in as one landlord and asks for another landlord's receipts, documents, payments and tenants using the correct record numbers. Every one is refused, and the test runs before any change ships.
Tenants are held to the same rule
A tenant reaching for a landlord page, or for another tenant's records, is turned away by the same check — not by hiding the link.
Passwords and sign-in
Nobody can read your password
Passwords are hashed with scrypt, a deliberately slow one-way function. What is stored cannot be reversed, so it is no use to anyone who obtains it.
Tenants set their own
You send an invite; they choose the password. You never see it and cannot recover it. That protects them, and it protects you from ever being accused of using it.
Guessing is throttled
Repeated sign-in attempts are slowed down, both per account and per machine, so a password cannot be ground down by trying.
Invites expire
A setup code works once and stops working after 14 days. If it lapses, you send another.
Where your files live
Not on the app server
Leases, receipts and photographs go to managed object storage, not to the disk of whatever machine is serving the site. A server can be replaced at any moment; your files are not on it.
Filed under your account
Every file is stored beneath the account that owns it. That is what makes it possible to hand you everything you have, or delete all of it, as one clean operation.
Never served from a public link
There is no guessable address for a document. Every file is fetched through a request that checks who you are and whether that particular file is yours.
Only sensible file types
Uploads are limited to documents and images, and are size-capped. A file cannot be renamed into somewhere it does not belong.
Questions
Can another landlord see my property?
No. Every record in Latchly is stamped with the account that owns it, and every request is filtered by the account you are signed into. Asking for a record from another account gets the same answer as asking for one that does not exist.
Can you see my password?
No. Passwords are put through a one-way hash before they are stored, so what we hold cannot be turned back into your password. If you forget it, you reset it — nobody can look it up for you.
Can I see my tenants' passwords?
No, and this is deliberate. You invite a tenant, they choose their own password, and it is theirs. It means a tenant can never say you signed in as them.
What can my tenants see?
Their own rent, receipts, documents and requests, and nothing else. Not other tenants, not your costs, not your notes, and nothing at any other property you own.
Who else can get at my data?
Latchly does not sell data, does not share it with advertisers, and does not use it to train anything. It is your business records and it stays that way.
Ask us anything else
If there is something you need to know before you trust us with this, ask.