As a software engineer, I’m looking into the security risks of the ‘PDF-via-Email’ standard for financial verification. It seems like a massive PII leak waiting to happen when we send raw bank data to strangers on Marketplace.
I’ve trying to find a way to verify that YTD totals match paystubs and bank deposits mathematically, without the landlord ever seeing the raw transaction data or account numbers. The goal is to provide the 'Trust' metric to the landlord without the 'Data Leak' for the tenant.
For anyone in proptech or security: Is there a reason why 'verified math' wouldn't be enough for a landlord compared to a raw PDF? Trying to see if I’m missing a legal or 'peace of mind' requirement that prevents us from moving toward a more private standard.