Security & Compliance
Security controls to help protect your data and support your own compliance work.
User Roles & Permissions
Fine-grained access control with predefined roles: Owner, Admin, Manager, Staff. Customize permissions per feature area.
Audit Logging
Logging of key user actions, so you can see who did what and when.
Two-Factor Authentication
Enhanced security for admin and tenant portal logins. TOTP-based 2FA with app or SMS verification.
Document Management
Document storage with expiration tracking, versioning, and retention settings.
Role-Based Access Control
Owner
Full access to all features, settings, and reports. Can manage users and billing.
Admin
Full operational access. Cannot modify billing or owner settings.
Manager
Day-to-day operations, tenant management, reports. Limited settings access.
Staff
Basic operations only. No access to financials or sensitive reports.
Audit Trail
Key actions are logged for accountability.
User Actions
Login, logout, password changes, and permission updates
Financial Activity
Payments, refunds, adjustments, and invoice changes
Tenant Records
Profile edits, move-ins, move-outs, and unit changes
System Changes
Settings changes, rate updates, and configuration edits
Audit Log Entry Example
| Timestamp | User | Action | Details | IP Address |
|---|---|---|---|---|
| 2024-01-15 14:32:18 | john.manager | payment.process | Payment $125.00 for Tenant #1042 | 192.168.1.100 |
| 2024-01-15 14:28:05 | sarah.admin | tenant.update | Updated phone for Tenant #1035 | 192.168.1.105 |
| 2024-01-15 14:15:00 | system | autopay.charge | Auto-charged 15 tenants successfully | - |
Document Management
Handling of sensitive documents:
- Connections: Documents are sent over encrypted HTTPS connections
- Expiration Tracking: Alert when IDs or insurance expire
- Versioning: Keep history of document revisions
- Retention Policies: Auto-delete after configured period
- Access Controls: Role-based document visibility
Security Alerts
Notifications for security events:
- Failed login attempts
- Password reset requests
- New device logins
- Permission changes
- After-hours gate access (with PTI)
Compliance & Data Protection
Encryption
Connections are encrypted with HTTPS (TLS). Ask us how specific data is protected.
Card Payments
Card numbers are entered with your payment processor (Authorize.net, Stripe or NMI), which tokenizes them. STORAGEsimple does not itself certify or replace your own PCI obligations.
Data Backup
Automated nightly backups of the hosting server.