Inspiration I was talking with one of my mentors who has a beautiful property they want to rent out, but they absolutely refuse to list it on Airbnb. The idea of total strangers sleeping in their house was a massive dealbreaker. I realized the core problem with current rental platforms isn't the software; it's the lack of a "Web of Trust." Hosts don't want an open door—they want a velvet rope.
What it does Vouchd is a private, invite-only property rental platform built on a strict whitelist architecture. An invite code only gets you into the lobby. To actually see or book a property, the host must review your profile, conduct a vetting meeting, and manually add you to their property's specific whitelist. If you aren't whitelisted, the property doesn't even exist on your feed.
How we built it We built the engine using a dockerized Postgres database and a FastAPI (Python) backend, managed with SQLAlchemy. The API is secured via JWT authentication. The frontend is a clean React (Vite) application styled with Tailwind CSS, utilizing native Fetch API calls to minimize third-party dependency vulnerabilities (like the recent Axios supply chain attacks).
Challenges we ran into The biggest hurdle was locking down the authorization logic. Building the authentication (logging users in) was straightforward, but mapping the "Actor vs. Target" logic was tough. We had to do some intense SQLAlchemy restructuring to patch an "Unlocked Apartment" vulnerability, ensuring that a logged-in renter couldn't maliciously manipulate the payload to add themselves to a host's whitelist.
Accomplishments that we're proud of We're incredibly proud of building a fully functional "Trust Engine." The database architecture successfully tracks the exact lineage of invites (using an invited_by_id self-referential relationship). This means there is permanent social accountability for every single user on the platform.
What we learned I learned the critical difference between authentication (knowing who someone is) and authorization (verifying what they are allowed to do). Pivoting the core booking logic mid-hackathon from a standard "global feed" to a "strict personal gate" was also a masterclass in cleanly decoupling backend routes without breaking the app.
What's next for Vouchd We plan to integrate the Gemini API to act as an AI "Host Vetting Assistant," instantly summarizing a renter's professional background and LinkedIn data for the host before their vetting meeting. We are also exploring moving the invite-code ledger onto Solana to create an immutable, cryptographically secure web of trust.
Log in or sign up for Devpost to join the conversation.