Security and fraud prevention
Rental fraud is the reason Ayillo exists in the shape it does. Verification is not a badge we hand out — it is a gate that stands in front of publishing.
Last updated August 3, 2026
How a listing gets published
Every publisher passes identity verification and a confirmed phone or email before a listing can go live. Ownership or written management authority is checked against documentation, and brokers and agents must show a license or an authorization letter.
Verified signals expire. When a signal lapses, the trust tier drops and publishing rights narrow until it is renewed.
Trust tiers
Listings display the tier behind them — unverified, agent, broker, or owner — so a renter can see the strength of the evidence, not just a checkmark.
Platform security
Data is encrypted in transit and at rest. Access is enforced at the database layer with row-level policies, so a workspace can only read its own records regardless of how a request arrives.
Permissions are role-based and granular, sensitive actions are written to an immutable audit log, and payment credentials are tokenized by our payment providers — full bank or card numbers never touch Ayillo's database.
Reporting a problem
Report a suspicious listing from the listing page, or contact us directly for security issues. We investigate every report and respond to verified vulnerability reports promptly. Please do not test against other users' data.