Security at ZedNest

• Authentication and sessions. Sign-in is handled by our managed authentication service over encrypted connections, and sessions expire and are refreshed automatically.
• Row-level access rules. Data access is enforced in the database itself, so a request can only read or change rows the signed-in account is entitled to — not just in the app interface.
• Role-based access. Tenant, landlord, agent and administrator capabilities are separated, and roles are stored in a dedicated roles table rather than on user profiles.
• Founder-only admin role management. Only the Founder account can grant or remove administrator access. The rule is enforced server-side and in the database, and it blocks self-promotion, promotion of suspended accounts and removal of the Founder.
• Private identity document storage. Selfies and identity documents are stored in private buckets that are not publicly readable; authorised administrators view them only through short-lived, access-controlled links.
• Live property verification. Verification photographs are captured in-app with the GPS coordinates and accuracy recorded at the moment of capture, so moderators can compare them against the stated address.
• Payment integrity. Incoming payment callbacks are signature- checked, payment references are unique across the platform, and duplicate or replayed references are rejected before any balance changes.
• Abuse limits and monitoring. Sensitive actions such as one-time codes and payment submissions are rate-limited, and errors and system events are logged so we can detect and fix problems.

• Sign-in is handled over encrypted connections, and sessions expire automatically.
• Never share your password or one-time codes with anyone, including people claiming to be ZedNest staff.
• ZedNest staff will never ask for your password, full mobile-money PIN, or your identity documents outside the in-app verification flow.
• Sign out on shared devices, and contact us immediately if you suspect unauthorised access.

• Prefer listings with verification badges, and view a property in person before paying rent or deposits.
• Be wary of anyone pressuring you to pay outside the platform or before viewing.
• Use the report button on any suspicious listing — moderation reviews every report.

If you believe you have found a security vulnerability in ZedNest, email hello@zednest.app with the subject “Security report”, a description of the issue and steps to reproduce it. Please do not access data that is not yours, disrupt the service, or disclose the issue publicly before we have had a reasonable opportunity to respond. We will acknowledge your report and keep you informed of progress.

No online service can guarantee absolute security. The measures on this page describe our current practices and are updated as the platform matures. They are not a certification, a compliance statement, or the result of an independent security audit or penetration test, and we do not claim conformance with any particular security standard.