Sign-in runs through an OIDC identity provider — Havenward never sees or stores your password.
Every request that reaches property, tenant, lease, payment, or maintenance data is scoped server-side to the account that owns it. The scoping is enforced in the API, not by hiding things in the interface, and it applies to the AI assistants as well as the rest of the app.
Payments run through Stripe-hosted checkout and Stripe Connect. Card details are entered on Stripe's own pages and never touch Havenward's servers.
This page describes controls that are actually implemented. Havenward does not currently claim SOC 2, ISO 27001, or any other third-party security certification.