Security and data handling
Leases are confidential. This page sets out exactly where yours go, who handles them and how you remove them. If you have a security questionnaire, email jay@leaseview.com.au and we'll complete it.
Where your data is stored and processed
Your leases, the dates found in them and your proof files are stored in Sydney. Two services outside Australia process data for specific jobs, listed below.
| Provider | What it does for LeaseView | Location |
|---|---|---|
| Supabase | Database, sign-in and storage for your lease PDFs and proof files | Sydney, Australia |
| Vercel | Hosts the website and runs LeaseView's server code | Sydney, Australia |
| Anthropic (Claude) | Reads uploaded leases to find dates, and drafts notice letters when you ask | United States |
| Resend | Sends reminder emails, which contain dates, site names and obligation titles but no documents | Tokyo, Japan |
How the AI is used
- When you upload a lease, the PDF is sent to Anthropic's Claude model to find its dates and obligations.
- Under Anthropic's commercial terms, what we send is not used to train their models, and Anthropic deletes it within 30 days.
- Nothing the AI finds goes live until someone on your team has checked it against the lease and approved it. Reminders only go out for approved items.
- Each AI result is kept in your workspace's audit log with the model used and who checked it, so you can show where every date came from.
How it's protected
- Encrypted in transit (HTTPS) and at rest (AES-256).
- Each company's workspace is separated inside the database itself, not just in the app, so one customer can never see another's data.
- Lease PDFs and proof files sit in private storage. They open only for signed-in members of your workspace, through links that expire after 10 minutes.
- Passwords are handled by Supabase's sign-in service and are never stored in readable form.
- Keys that give access to the database and AI services stay on the server and never reach the browser.
- Strict browser security headers, and usage limits on the AI features.
Your control over your data
- Your data is yours. We don't sell it or use it for anything other than running your workspace.
- Deleting a lease removes its dates, its PDF and any proof files attached to its obligations.
- The audit log keeps a record of AI results after a lease is deleted, for traceability. To remove your whole workspace, including the audit log, email us and we'll confirm once it's done.
Certifications
LeaseView is a young company and doesn't yet hold its own certifications such as SOC 2 or ISO 27001. The providers that store and process your data maintain their own security programs; Supabase, for example, holds SOC 2 Type 2.
Last reviewed 29 October 2026.