Server-side payment gates
Checkout eligibility is signed and verified server-side before a payment request is sent to Square.
Trust & Security
Accuracy and security are release requirements.
Landlord Record treats source integrity, payment authorization, release traceability, and the ability to disable unsafe data paths as core product controls.
Current security principles
Card-data separation
Square hosts/tokenizes card entry. Landlord Record does not receive or store the full card number.
Source kill switches
Identity-producing source adapters can be disabled when a field contract or source behavior becomes unsafe.
Release integrity
Release metadata, county counters, protected migration hashes, active assets, and deploy-package integrity are verified during the build.
Least-data product direction
The product avoids broad personal phone/email/relative/current-resident people-search functionality.
Traceable facts
Displayed property relationships are designed to retain source provenance and documented role context.
Responsible vulnerability reporting
If you believe you found a security vulnerability, use the contact form and select Security. Describe the affected URL, what you observed, and safe reproduction steps. Do not access data that is not yours, disrupt the service, exfiltrate records, or publicly disclose an unpatched vulnerability before there has been a reasonable opportunity to investigate.
Security status
This page describes operating controls and goals; it is not a certification of compliance with a particular security standard. The corporate roadmap uses NIST Cybersecurity Framework 2.0 as the security-program baseline and requires separate production validation.