Security

We protect your listings,
your sellers, and your data.

Showing Bell handles seller contact details, lockbox notes, and buyer details every day. Here is how we protect all of it, in plain English.

Encrypted everywhere

It all runs on Cloudflare’s worldwide network.

  • Every connection is encrypted, with no way to turn that off
  • Your browser is told to use a secure connection every time
  • Strong protection against attacks that try to knock the site down

Account security

Sign-in is boring, in the good way.

  • Passwords are scrambled with a standard method and never stored in a form anyone can read
  • Your sign-in cookie cannot be read by scripts or sent to other sites
  • We email every new account to check the address is real
  • Password reset links work once and then run out
  • Limits on how often anyone can try to sign in, sign up, or reset

Links nobody can guess

Approval and feedback links are built on real math, not clever tricks.

  • Approval, manage, and feedback links carry a random 256-bit code. Check-in and buyer links carry a 128-bit signed code
  • We store only a scrambled copy of each code, so a leak hands out no working links
  • Links run out on a schedule, and stop working once used
  • Lockbox and entry details go out only after you approve a showing

Hardened in the browser

Layer on layer of defense against web attacks.

  • A strict rule on every page for what code may run
  • No other site can hide our pages inside its own
  • Requests sent from other websites are turned away
  • Account and link pages stay out of search engines and out of caches

Payments by Stripe

Card data never touches our servers.

  • Stripe runs checkout and billing, at the highest card-industry rating
  • We store no card numbers, only a reference to your plan
  • Every message from Stripe is checked for a valid signature

Bots and abuse

Public forms are screened, not open doors.

  • Hidden traps that quietly block bots
  • Limits on how often one person or one account can try
  • Every form is checked on our own servers

Texting done right

The texting rules are built in, not bolted on.

  • We text only people who have said yes in writing
  • Reply STOP and the texts stop right away, for good
  • Reply HELP and you get help. We keep a record of who agreed

Your data stays yours

Being independent is part of keeping you safe.

  • The database itself keeps each account’s records apart
  • Every change is written to a log
  • Never sold, and never used to run ads for anyone else
  • No portal owns us, so your showing data is not someone else’s product

Found something we should know about? Tell us. A real person reads it, fast.

GOOD THINGS START AT THE DOOR

Ready when your
next listing is.

Every plan includes every feature and a 30-day free trial.

Start 30 days free
30 days free · No credit card
No contracts · Cancel anytime