How your data is held

You are being asked to put your tenants’ names, phone numbers, identity documents and payment history into a system run by somebody you have not met. This page is what we would want to read before doing that ourselves.

Every claim below is a mechanism rather than an adjective, and each one can be checked — ask and we will show you. We have deliberately not used the phrase “bank-grade security”, because it means nothing and everybody says it.

What is actually in place

• Your records are walled off inside the database, not inside the app. Every one of our 104 tables carries row-level security, with 181 policies between them. The database itself refuses to hand over another landlord's row, so a mistake in a page cannot leak what the database will not return. Most systems check this in application code, where one missed condition is a breach.
• The activity log cannot be edited. Not by your staff, and not by us. Who did what, when, and the values before and after. The table refuses UPDATE and DELETE outright — we tested it on an administrator connection and were refused. If somebody changes a rent figure or opens a tenant's file, that record exists and cannot be tidied away afterwards.
• A tenant's NIN is encrypted, and every look at it is written down. It is stored encrypted rather than in plain text, only the last four digits are shown by default, and revealing the full number is a deliberate act that the database logs against the person who did it.
• Your rent never passes through us. Your tenant transfers into your own bank account. We hold no float, no balance and no settlement account, so there is nothing of yours here to lose. This is also why we are not a payment company and do not want to be.
• Receipt, identity and invitation links are hidden from every crawler. Those links are public so a tenant can show a receipt to a bank without an account — which means they must never appear in a search result. They are excluded in robots.txt from Google, Bing and every AI crawler by name, each one listed separately because robots rules do not inherit.
• Files live in private storage and are served by short-lived links. Ten of our eleven storage areas are private; the eleventh holds photographs of vacant flats, which exist to be shared. Nothing is a URL somebody can forward — a document is reached through a signed link that expires.

easypm Limited is registered with the Nigeria Data Protection Commission as a data controller and processor of major importance, under Section 44 of the Nigeria Data Protection Act 2023 — registration NDPC/DCP/15809, valid through 26 October 2027.

What we would do if something went wrong

Tell you. Under the Nigeria Data Protection Act we are required to report a breach that puts people at risk to the Commission, and to tell the people affected where the risk to them is high. We would do both, and we would tell you what we knew while we still only partly knew it, rather than going quiet until we had a tidy account.

What you control

• Who sees what. Caretakers and co-managers see only what you switch on for them. A managing agent running several owners’ buildings cannot see one owner’s records from another’s account.
• Your password is the only lock today. Until two-factor exists, use a long one and do not reuse it. The password generator on the signup form will make you a good one.
• Your own data, on request. Ask and we will export it or delete it, subject to the records the law requires us to keep — the privacy notice sets out which those are.

Ask us

If you are weighing this up and something here is not enough, write to support@easypm.ng. A question about security gets a real answer from the person who built the thing, including where the honest answer is that we have not done it yet.