Trust
Security at Makao360
Makao360 handles rent money and identity data. We treat it accordingly. This page lists the controls that are live today. It is app-owned editable content, not an independent certification.
Encryption in transit & at rest
TLS 1.2+ everywhere. Data at rest encrypted on managed Postgres.
Row-level access control
Every table enforces RLS. A landlord can never read another landlord's rows.
Least-privilege admin access
Admin operations require a distinct role and are audit-logged.
Immutable ledger
Rent contributions are append-only, cryptographically ordered, and reconciled daily.
Auditability
Every reconciliation, refund, or role change appears in the audit trail with actor + timestamp.
Responsible disclosure
Report vulnerabilities to security@makao360.app — we respond within 48 hours.
Report a vulnerability
Email security@makao360.app with reproduction steps and impact. Do not test on live tenant data. We acknowledge within 48 hours and coordinate a fix.