Theft protection
No one person can move your money.
HOA embezzlement usually happens the same way: one trusted volunteer controls the bank, the books and the reports. CommonBoard splits those jobs and shows the whole board the truth from the bank.
Theft protection
Controls that run every day
Two people for every big payment
Bills over your limit need a second board member. The person who entered a bill can't approve it, and nobody can approve a payment to themselves or a related vendor.The bank report comes from the bank
Every month the whole board gets a report built straight from the bank feed, not from anyone's spreadsheet. If the books differ, it says by how much.Alerts to two board members
Unusual payments, changed payout banks and reserve money used for operating bills alert the president and another board member, never the person who did it.Changing where money goes takes two
A new payout bank or a vendor's new bank account must be confirmed by a second board member, with the vendor's phone number on file.Access reviews
A yearly check of who can see and move money. When someone leaves the board, their access ends on the right date.Fidelity insurance check
CommonBoard compares your fidelity (crime) coverage with your bank balances and a few months of dues, and warns you when it falls short.
We never hold your money
Your money stays in your association's bank.
Owner payments go straight to your association's own account through its own Stripe account. CommonBoard never pools association money and never holds it, not even for a day.
- Payouts go only to a bank account the board approved, with a second board member's OK.
- We never store full bank account or card numbers. Stripe and Plaid keep them; we keep a token and the last four digits.
- Bank feeds are read-only. CommonBoard can see transactions; it can't move money out of your bank.
Security summary
How we keep your data safe
Walls between associations
The database itself keeps each association's data separate. Owners see only their own homes and accounts plus what the board publishes.Two-step sign-in for the board
Board members and CPAs sign in with a code from an authenticator app or a passkey, and are signed out after a period of no activity.Books that can't be quietly changed
Entries are never edited or deleted, only reversed. Closed months are locked. The books are checked every night.Every change logged
Changes to money, owner records, violations, permissions and votes are written to a log that can't be edited, with who, what and when.AI drafts, people decide
AI never sends, charges, fines or pays anything on its own. A board member approves every draft, and every AI action is logged.Files stored encrypted
Invoices, photos and documents are encrypted and opened only through permission-checked links.