Security and control

Keep each rental company’s people, payments, and records in the right tenant.

Rivet is built around tenant-scoped records and explicit permissions so the people operating one rental company do not inherit access to another.

What connects

Keep the information and the work in the same story.

Connection 01

Tenant-scoped data

Company records, settings, connections, payments, inventory, and workflows are resolved in the active tenant context.

Connection 02

Permissioned actions

Sensitive settings and operating actions require the appropriate tenant or platform permission.

Connection 03

Hosted card entry

Renter card details are entered in Stripe-hosted checkout rather than a Rivet card form.

How it works

A connected path with clear control points.

Each stage preserves the customer, rental, tenant, and operating context needed by the next one.

  1. 1

    Establish membership

    Users access a company through an active membership and role.

  2. 2

    Resolve the active tenant

    Rivet scopes operating requests to the company selected for that authenticated user.

  3. 3

    Enforce action permissions

    Management, billing, payment, and platform functions apply explicit authorization checks.

  4. 4

    Record critical activity

    Supported workflows retain identifiers and audit context for important changes and external events.

Operational outcomes

Make the next action easier to see.

01

Clear company boundaries

A multi-tenant platform can support separate rental businesses without treating them as one shared account.

02

Reduced payment exposure

Stripe handles sensitive card entry and the tenant controls its connected payment account.

03

Operational accountability

Permissions and recorded workflow state make sensitive actions easier to review.

Questions

What buyers usually need to know.

1

Does Rivet store renter card numbers?

No. Supported card payments use Stripe-hosted checkout.

2

Can one user belong to more than one company?

Rivet supports company memberships and an active-company context while preserving tenant-scoped access.

3

Does Rivet claim a security certification?

This page describes implemented product controls. Rivet does not claim a certification that has not been independently completed.

4

How should I report a security concern?

Use the Get Started form and identify the message as a security concern so it can be routed for review.

Keep exploring

See the connected parts of Rivet.