HOA data security
Your community’s records include resident information, payment history, and private documents. Communitrak helps you protect them with account security, access permissions, encryption, and daily backups.
- iPhoneAdded Sep 19 · Last used today
- MacBook ProAdded Sep 19 · Last used Oct 27
Your board decides who can view and update community records.
Access permissions
Give board members and volunteers access to the records they need. Your board chooses who can view information and who can make changes.
Account protection
Board members and residents can add two-factor authentication to their accounts or use passkeys to sign in.
Secure payment processing
Stripe handles card and bank details directly when residents pay dues. Communitrak never receives or stores those details.
Data encryption and backups
Encryption protects stored data and information sent to and from Communitrak. Daily backups help preserve your community’s records.
How we protect your data
The safeguards behind your accounts, community records, and payments.
Sign-in and accounts
- Your password is never stored in a readable form. No one at Communitrak can see it.
- Every account can use two-factor authentication with an authenticator app and one-time backup codes.
- Passkeys let you sign in with Face ID, Touch ID, Windows Hello, or a security key.
- Repeated failed sign-in attempts are temporarily blocked.
- Account recovery includes additional safeguards and notifications.
Access and permissions
- Your board assigns permissions for payments, violations, requests, documents, and other community records.
- Each community’s records are kept separate. Members see only the communities they belong to.
- Access permissions protect private documents and community records.
- Our support team accesses an account only to help resolve an issue, and that access is logged.
Payments
- Payments are processed by Stripe, a PCI DSS Level 1 certified payment processor.
- Card and bank details are entered in Stripe’s secure fields and never reach Communitrak’s servers.
- Identity details needed for payouts, such as a Social Security number, go directly to Stripe. Communitrak never receives or stores them.
Infrastructure and encryption
- Communitrak is hosted in the United States.
- Network security protections help block malicious traffic.
- Every page uses HTTPS to encrypt information sent between your browser and Communitrak.
- Database connections are encrypted, and the database is encrypted at rest.
Backups and reliability
- The database is backed up daily, with point-in-time recovery to restore records to an earlier state.
- Automatic error monitoring alerts our team to application problems.
- Live system status is published at status.communitrak.com.
Privacy and vendors
- Your association owns its data and can export it at any time.
- We don’t sell community or resident data.
- Our Sub-processors page lists the vendors that handle personal data.
- AI features are optional and follow the permissions of the person using them. Our AI providers do not train on your data by default.
See our Sub-processors, Privacy Policy, and live system status.
Have a question about security?
Send your questions or security questionnaire to hello@communitrak.com. We can also walk you through account settings and permissions in a demo.
Frequently asked questions
Data ownership, privacy, and access to your community’s information.
Your association does. Communitrak processes it on your behalf, as described in our Privacy Policy.
Yes. Your association can export its community data at any time.
Your community’s data is stored in the United States. See our Sub-processors page for details about the vendors that handle personal data and their locations.
Our support team can access account data when needed to resolve an issue, and that access is logged. Our team cannot read your password because it is never stored in a readable form.
No. We don’t sell community or resident data.
Payments are processed by Stripe, a PCI DSS Level 1 certified payment processor. Residents enter card and bank details in Stripe’s secure fields, so those details never reach Communitrak’s servers.
Our AI providers do not train on your data by default under their commercial terms. AI features are optional and can access only the information the person using them has permission to view.