One secured system
All resident and property manager data is kept in one secured system.
Named access
Only named staff can reach it, each with their own sign-in and multi-factor login. No shared accounts. Access is removed the same day someone leaves.
Encryption
Data is encrypted where it is stored and whenever it moves, including every file sent to Experian. This website uses HTTPS.
Social Security numbers
Masked on screen except where the full number is needed. No form on this website asks for one.
Logged
Every sign-in, view and export is logged and reviewed.
People
Everyone with access has a background check and security training first.
Devices and network
Managed computers with anti-malware. Firewalls and controlled remote access.
Backups
Encrypted backups, stored separately. Restores are tested.
Testing
A security firm tests this website and its forms at least once a year.
Changes
Changes to the data system and to the monthly file are approved and tested first.
If something goes wrong
RateLoft has a written breach plan. We contain the problem, assess it, tell Experian, and tell affected residents as state law requires.
How data is used
Resident data is used only to report rent to Experian and to handle opt-outs and disputes. It is never sold.