Most rental management tools are built for agencies managing hundreds of units. But most landlords in Spain have just 1 10 properties and end up managing everything in spreadsheets, sticky notes, and WhatsApp reminders.
I've been building a SaaS with Lovable + Supabase that handles pretty sensitive stuff bank data via Open Banking, tax-related info. It's still in beta with very few users, but I want to get security right before opening it up more.
I know the basics (HTTPS, not exposing API keys in the frontend), but I'm not confident I've covered what actually matters for something handling financial/tax data.
For anyone who's dealt with this:
What would you consider the absolute minimum before letting real users connect their bank accounts to something you built solo?