Security First
HOAcrew is built with enterprise-grade security to protect your community data, vendor information, and financial transactions.
How your data is protected
Every request runs the same gauntlet — from the browser to the payout.
You
Board · Community manager · Vendor
TLS 1.3
Encrypted in transit
Scoped access
Role + row-level security
AES-256
Encrypted at rest
Verified actions
Server-validated payouts
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption via our infrastructure partners.
Role-Based Access
Strict role-based access controls ensure CAMs only see their community data, vendors only see the work orders they were awarded, and admin access is limited.
Server-Validated Actions
Work order approvals and payouts are validated on the server, database access is scoped with row-level security, and payment records are retained for every transaction.
Infrastructure
Hosted on Vercel with Supabase (AWS) providing managed database and authentication services.
Authentication
Secure authentication via Supabase Auth using email/password and magic-link sign-in, with session-based token management.
Compliance Verification
Vendor insurance documents are reviewed and verified through our compliance pipeline, with expiration dates recorded and expiring coverage flagged for review.
Report a Vulnerability
If you discover a security vulnerability, please report it responsibly to security@hoacrew.com. Every report is read by a person and acknowledged.