Security and your data
Your records aren't in a table with everyone's
Each association gets its own database, sign-in and file storage. Rules about who sees what are enforced by the database itself.
Own database.
Another association's residents aren't in it, so no query can return them.
Rules live in the database.
Who reads what is enforced on the data, not by hiding buttons.
Card details never reach us.
Payments go through Stripe Checkout; the card form is theirs.
Changes are logged.
Money, settings and console access, with old and new values. President only.
Roles
Who can see what
| Homeowner | Renter | Director or treasurer | President | |
|---|---|---|---|---|
| Who filed a complaint | Their own only | Their own only | Only if the board chose "every board member" | Yes |
| Medical basis of an accommodation request | — | — | Only if the policy opens it to the whole board | Yes, by default |
| Board-only documents | No | No | Yes | Yes |
| A household's balance and receipts | Their own | No | Yes | Yes |
| Another household's record | No | No | Yes | Yes |
| Site settings, feature switches, audit log | No | No | No | Yes |
The site's administrator account can also see what the President can. Accommodation requests: the board sees the request and decides either way.
Nothing quietly changed
Records that can't be quietly changed
Messages.
Can't be edited or deleted by anyone, including the administrator.
Notices and evidence.
Corrected by a new entry; the original stays.
Tow records and photos.
Added, never replaced.
Secrets and gate codes.
The audit log records that one changed, never the value.
Bank accounts.
Only the last four digits are ever stored.
When a volunteer steps down
Seat ends, access ends.
Removing a board seat ends console access that week, not next year.
Remotes revoked.
Ending a resident's seat revokes their credentials and vehicles, and the board is told to recover devices.
No stray admins.
An account still holding console access can't be deactivated until that access is removed.
What we hold, and what we don't claim
- We hold residents' names, addresses, contacts, balances and correspondence. The software can't work otherwise.
- Separate databases limit the damage of a mistake. They aren't a certification.
- We haven't had a third-party security audit. If your board needs one, ask before you buy.
It's your record
Full export on request.