What trust looks like in software.

You handle other people's money and other people's homes. Software that helps you do that is held to a higher bar. This page lays out the commitments DealProp makes to you, your tenants, and your owners — and the engineering behind them.

What it means for your business.

Four commitments. Each one has real engineering behind it, detailed below.

Security deposits, separated.

Where state law requires deposits to be held apart from operating funds, DealProp routes deposit splits to a separate ledger automatically. You don't have to remember the rule; the platform enforces it.

Your data is portable.

CSV export of every table you own — ledger, tenants, vendors, work orders — available on request, free at every tier. No exit fee. No lock-in. (Self-serve in-app export is on the roadmap.)

We never sell anything.

We don't sell your data, your tenants' data, or aggregated insights to anyone. We make money from your subscription and the platform fee on rent transactions. Nothing else.

Tenant privacy is enforced in the database.

Tenant contact info, payment history, and lease records are isolated at the database row level — not just by application code. A bug in our code can't expose one organization's tenants to another.

Money.

Every rent transaction is a three-way split. The tenant's payment enters DealProp's payment processor and is divided in the same API call into three flows: net rent to the PM's operating merchant, the platform fee to DealProp's fee merchant, and (where applicable) the security-deposit portion to the PM's trust merchant. No funds rest on DealProp's balance sheet.

Where state law requires deposits to be held separately from operating funds, DealProp automatically routes deposit splits to a separate Merchant Account flagged as trust. PMs in those states don't have to remember the rule; the platform enforces it.

Platform fees deduct via explicit split transfers to a dedicated fee merchant — never via the underlying processor's fee profile. You can audit every cent on every transaction.

Tenant÷OperatingPM merchantTrustdepositsFeeDealProp

Trust routing applies in

New YorkNew JerseyMassachusettsIllinoisConnecticutMarylandPennsylvania+ others
AES-256
encrypted at rest
TLS 1.2+
in transit
7-day
point-in-time recovery
Audit log
every authenticated action

Data.

Every table in our database that holds organization-specific records has Row Level Security enabled in Postgres. The database itself — not just our application code — enforces that organization A cannot see organization B's tenants, properties, ledgers, statements, work orders, or messages.

All data is encrypted at rest in our managed Postgres instance and in transit over TLS 1.2 or higher. Backups run continuously with 7-day point-in-time recovery.

Audit logs capture every authenticated action that touches money, tenancy, or vendor records. PMs can request their full audit trail at any time.

Org Atenantsledgerswork_ordersOrg Btenantsledgerswork_ordersOrg Ctenantsledgerswork_ordersRLS denies cross-org readRLS denies cross-org readPostgres + RLS

What's under the hood.

For visitors who want the engineering detail: DealProp runs on a small, named supply chain. We don't hide who touches your data.

Stripe Connect

Payment processing — rent collection, owner distributions, security deposits.

Tilled

Subscription billing for PM accounts.

Telnyx

SMS and voice for tenant maintenance intake.

Resend

Transactional email — statements, receipts, password resets.

Supabase

Managed Postgres with Row Level Security for tenant isolation.

Vercel

Application hosting and edge network.

Sentry

Operational error monitoring. No user content captured.

Doppler

Secrets management.

Questions about how we handle your data or money? support@dealprop.pro.