Hosting
Primary application data is stored through Supabase infrastructure in AWS's Ireland (eu-west-1) region within the European Union.
- File attachments in a private, non-public store
- File metadata and access rules in the database
Security and data
Where is your customer and fleet data, who can see it and how long is it kept?
Car rental companies hold customers' ID and licence details, contracts and payments. RentOkey explains plainly how that data is protected.
Layers that protect your data
Encryption
Traffic between your device and RentOkey is protected with HTTPS/TLS; the database and its backups are encrypted at the storage layer.
- TLS in transit
- Encryption at rest
- Enforced HTTPS on the website (HSTS)
Backups
The database is backed up automatically every day. In addition, a daily copy is taken to RentOkey's own backup system.
- Infrastructure backups: last 7 days
- Additional backup: daily copies for 30 days
- Additional backup: monthly copies for 12 months
Company, role and branch access
Companies cannot see each other's data. Users see only the records their role and branch allow within their own company.
- Branch managers and field staff within their branch
- B2B partners only on records they created
- Support access through controlled, time-limited and traceable sessions
KVKK records for identity images
ID, licence and passport images of customers and drivers open only to authorised roles, and every access is logged.
- Automatic deletion 5 years after the last rental ends
- Access and deletion logs on an admin screen
- Excel export for audits
Secure file access
Contracts, handover photos and documents are never shared through a public link; they open for authorised users through short-lived secure links.
- Download links valid for a few minutes
- Role-based file visibility
- A dedicated file area per company
Change log
Creation, update and deletion of reservation, vehicle, expense and maintenance records are kept with user and time information.
- Old and new value of each field
- Filters by date, module, action and user
- Excel export
Document reading on your device
Reading details from passport, ID and licence photos happens in the browser on your device; documents are not sent to an outside reading service.
- No outside reading service
- Photos go only to the customer's file
Account and sign-up security
Trial sign-up uses email verification, bot protection and rate limiting; team members join a company only by invitation.
- Email verification
- Bot protection and rate limiting
- Invitation-based team access
Processing of personal data
Which personal data is processed, for what purpose, and your rights are described in the privacy policy. For security questions, write to support@rentokey.com.
Data security FAQ
RentOkey’s primary application data is stored through Supabase infrastructure in Amazon Web Services’ Ireland region (eu-west-1), within the European Union.
A 21-day trial with real operations
Try RentOkey with your own fleet and team.
Plan reservations, review suitable vehicle suggestions and manage the operation queue from one screen. Decide on your subscription at the end of the trial.
No credit cardNo setup feeRequest migration support within 48 hours