Security
Your books, kept private, safe and recoverable.
You're trusting us with your books, your tenants' details and your documents. Here's how we protect them, in plain English.
At a glance
| What | How it's protected |
|---|---|
| Your organization’s records | Walled off from every other organization by the database itself |
| Getting in | Google sign-in, invitations for named people only, sign-out everywhere |
| What each person can do | Their role, checked by our servers on every request |
| Data on the move and on disk | Encrypted |
| Your documents | Private storage, opened through links that expire in 15 minutes |
| Mistakes and accidents | Daily backups, and the ability to wind back to any moment in the last seven days |
| Your books | Entries must balance; posted entries and closed periods are locked |
| Who did what | An activity log your administrators can read and download |
Walled off by the database, not just the app
The database itself refuses to show your records to anyone outside your organization. If in doubt, it shows nothing. We test for exactly that.
Everyone sees only what their role allows
Admin, Manager, Accountant or Viewer, enforced by our servers on every request. Peanut follows the same rules.
Mistakes can be undone
Daily backups, and the ability to wind back to any moment in the past seven days.
Only the right people get in
- Google sign-in. No separate Praedia OS password to steal or reuse, and we never see your Google password. Turn on 2-Step Verification in your Google account; Praedia OS relies on it.
- Invitations for one named person, valid for seven days, shown once, and withdrawable.
- Leaving is immediate. Deactivate a member and their access ends at once, on every device.
- Confirm it’s you. Downloading all your data, closing your organization and handing over ownership need a sign-in from the last ten minutes.
- Sign out of all devices with one button.
Your data is yours
Download a complete copy, every record and every document, any time. Close your account and it's kept for 30 days, then deleted.
Where your data goes
Everything is stored in Google Cloud, in the United States. These services handle some of it so features work:
| Service | What it receives | Why |
|---|---|---|
| Google Cloud and Firebase | Everything | Hosting, database, storage and sign-in |
| Google Gemini | Portfolio, financial and tenant details included in Peanut’s prompts | Peanut, the AI assistant |
| RentCast | Property addresses | Property records, rent and value estimates |
| U.S. Census geocoder | Property addresses | Locating a property |
| Stripe | Billing contact and subscription details | Payments. Card details go to Stripe and never reach our servers |
| Postmark | Recipients’ email addresses and the email’s content | Sending invitations, notices and reports by email |
Questions about any of these? Talk to us before you sign up.
This website counts visits with Cloudflare Web Analytics: no cookies, and no tracking of individuals.
What we don't claim
Better you hear it from us.
- No uptime figure or SLA. We don't publish an availability number we can't yet measure and evidence.
- No independent certification or penetration test yet. Our most recent whole-application security review (October 2026) was internal.
A detailed security overview is available on request, and we welcome reports of security issues: email sec@praediaos.com.
What you can do
Turn on 2-Step Verification in Google, give each person only the access they need, and remove people promptly when they leave.
See what your portfolio really earns.
14 days free with everything in Pro. No card needed.