Rent Café not Considered Secure by Multiple Tenants

Several tenants have mentioned fearing that the Rent Café system does not seem secure. As a result, they have no choice but to revert to the old-fashioned method of using paper checks.

Rent Café is produced by Yardi Systems, and its design lacks modernity. Among other things, access is not protected by two-factor authentication, which is standard for applications with sensitive information and even required by law in several U.S. states for applications having financial data. Furthermore, the software operates on private servers rather than a recognized infrastructure such as Microsoft Azure, Amazon Web Services, or Google Cloud. The technological description on the Yardi corporate website dates back eight years (2016).

The security page contains few details and mentions obtaining SSAE 18, which suggests they have not conducted an official security audit since 2018 (the corresponding SSAE 18 timeframe), as a more recent certification would be specified. A reputable cloud vendor would have at least an annual audit and certification.

A modern software would have an integration with Stripe, Moneris or other companies specialized in payments.

There is a potential for theft of any information put in the system.

Software with 2-factor authentication, Security certifications from 2023, and runs on Amazon AWS or Microsoft Azure