Security

Your rentals’ data, isolated and protected.

How Nexxus keeps your company’s records separate, keeps card and bank details out of our servers, and keeps a record of every signature.

Your data

One company, one set of records.

  • Isolated at the database

    Every record belongs to one company, and row-level security in the database enforces it on every read and write — not only in the app’s screens.

  • Portals see only their own

    Tenants, owners and applicants sign in to their own portals and see only their own leases, payments, statements and documents.

  • Encrypted in transit and at rest

    Every connection uses HTTPS, and the database provider encrypts stored data at rest.

  • Checked after every change

    Automated security probes run against the live database after every change to its access rules, and fail loudly if any path lets a user reach data they shouldn’t.

  • Your own logins, your own roles

    Each team member signs in with their own account — no shared passwords — and company settings stay with the account’s owner-admin.

  • We don’t sell your data

    Nexxus doesn’t sell personal information. The privacy policy lists every service provider that handles data for us and why.

    Read the privacy policy
Payments and documents

Money and signatures, handled with care.

  • Card and bank details stay with Stripe

    Payments are entered into Stripe’s own fields and bank connections and go straight to Stripe, a PCI DSS Level 1 service provider — into your own Stripe account.

  • A record of every signature

    Each e-signed lease keeps an audit trail — who signed and when, from which IP address, the consent they agreed to and a fingerprint of the document — plus a signing certificate on the signed copy.

  • AI that asks first

    Nexxus AI works inside the signed-in person’s permissions. What it drafts waits for approval, and moving money or signing a document always takes a person.

Infrastructure

Built on audited providers.

Questions

Security, answered.

Can another company see my data?

No. Every record belongs to one company, and the database itself enforces that with row-level security — the rules are checked on every read and write, not only in the app’s screens. Tenants, owners and applicants see only their own records in their portals.

Does Nexxus store card or bank numbers?

No. Card and bank details are entered into Stripe’s own payment fields and bank connections, and go straight to Stripe — a PCI DSS Level 1 service provider. Nexxus keeps only what it needs to show a payment, such as the last four digits.

Where is my data hosted?

The Nexxus app runs on Vercel and the database on Supabase (Postgres), both in the United States. Connections are encrypted with HTTPS, and Supabase encrypts stored data at rest.

What can Nexxus AI do with my data?

Nexxus AI works inside the signed-in person’s own permissions, so it can’t see anything they can’t. Actions it drafts — a reply, an applicant decision, a lease — wait for a person to approve them, and moving money or signing a document always takes a person.

How do I report a security issue?

Email support@trynexxus.com with the details and how to reproduce it. Please don’t access other people’s data while testing.

Early access

Launching soon. Be first in line.

Nexxus opens to its first operators in the coming weeks. Leave your email and you get:

  • An email when early access rolls out
  • A free, no-credit-card trial of early access
  • Founder pricing: 50% off your plan for life

We’ll only use this to tell you about early access — unsubscribe any time.

Or explore the live demo first