LetHub
Trust & Security

Enterprise-grade security, built in

Security is not an afterthought — it is foundational to everything we build. Here is how we protect your data, your clients' data, and your tenants' data.

Data encryption

  • All data encrypted at rest using AES-256 encryption.
  • Data in transit protected by TLS 1.3 with perfect forward secrecy.
  • Encrypted backups stored in geographically separate UK data centres.

Infrastructure security

  • Platform hosted on AWS (London region, eu-west-2) and Vercel's enterprise infrastructure.
  • Supabase database hosted in EU (Ireland) with SOC 2 Type II certification.
  • DDoS protection via AWS Shield and Vercel's edge network.
  • Web Application Firewall (WAF) blocking OWASP Top 10 attack vectors.

Access control

  • Multi-factor authentication (MFA) available for all user accounts.
  • Role-based access control (RBAC) with granular permissions — admin, agent, landlord, tenant, contractor.
  • Row-Level Security (RLS) in Supabase ensures users only see their own data.
  • Session timeout after 30 minutes of inactivity (configurable per agency).
  • Single Sign-On (SSO) via SAML 2.0 available on Enterprise plans.

Application security

  • Secure development lifecycle: code review, static analysis (SAST), dependency scanning.
  • Cross-Site Scripting (XSS) and Cross-Site Request Forgery (CSRF) protections built into the framework.
  • Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and other security headers enforced.
  • Responsible disclosure at security@lethub.co.uk.

Compliance

  • UK GDPR compliant — see our GDPR page for full details.
  • PCI DSS compliance via Stripe — we never handle raw card data.
  • Data Processing Agreement (DPA) available for all customers.

Business continuity

  • Real-time database replication with point-in-time recovery (PITR).
  • Disaster recovery plan with documented runbooks.
  • 24/7 on-call engineering team for critical incidents.

Report a security issue

If you believe you have found a security vulnerability in LetHub, please email us immediately. We take all reports seriously and aim to respond within 24 hours.

security@lethub.co.ukGDPR compliance