Security
Protection for your most sensitive lease data
LeaseWizard is designed to keep your documents, financial terms, and portfolio information private, protected, and accessible only to the right people.
Protecting customer data
Security controls are built into how LeaseWizard stores, processes, and provides access to customer information.
- Data isolation
- Each customer organization operates within an isolated data environment, keeping its documents and portfolio data separate from other customers.
- Data encryption
- Customer data is encrypted both in transit and at rest.
- Secure document access
- Documents are available only to authenticated and authorized users. Temporary links expire automatically and do not provide permanent public access.
- Security by default
- Application access is restricted by default, and automated security checks are performed before changes are released.
Identity and access
LeaseWizard gives organizations control over how users authenticate and what information they can access.
- Multi-factor authentication
- Password-based login requires an additional one-time verification code.
- Passwordless login
- Users can securely sign in using a time-limited email code.
- Enterprise SSO
- Organizations can connect their identity system through OpenID Connect SSO.
- Role-based access control
- Standard and custom roles determine who can view, edit, export, validate, or administer information.
- Portfolio restrictions
- Access can be limited to specific countries or parts of a customer’s portfolio.
- Domain verification
- Organizations can verify ownership of their email domains before enabling automated user provisioning.
- Session control
- Administrators can deactivate users and revoke their active sessions when access should be removed.
Visibility and control
LeaseWizard records important security activity and provides safeguards around administrative and integration access.
- Security activity records
- Important authentication, access, API-key, permission, and contract-change events are recorded.
- Administrative controls
- Sensitive organization settings and user-management actions are limited to authorized roles.
- Controlled support access
- Authorized support access is restricted, time-limited, recorded, and communicated to customer administrators.
- Secure API access
- The public API is read-only. Access is controlled through scoped, rate-limited, revocable keys.
- AI access controls
- The AI assistant follows the same organization, role, and user permissions as the rest of LeaseWizard.
- Confirmed actions
- Actions initiated through the AI assistant that would change customer data require explicit user confirmation.
Privacy
Customer information is used only to provide and operate LeaseWizard.
- Customer data ownership
- Customers retain ownership of their documents and portfolio data.
- Private conversations
- Saved AI conversations are visible only to the user who created them.
- Data requests
- Customers may request access, export, correction, or deletion of their data.
- Security documentation
- Additional security documentation and responses to customer security questionnaires are available on request.
Security contact
For security questions, documentation requests, or customer questionnaires, contact our team.