Trust, privacy and security
Plain words about how your community’s data is kept separate, private and accountable.
Separate data per community
Every community is its own site with its own data. A session is bound to one community; switching communities means a new, scoped token.
Roles and scopes
Every action needs exactly one permission. A person has one role per community, and the app shows only what that role may see.
An audit trail
Changes are recorded with who, what and when. Sensitive details are redacted unless the viewer holds the right permission.
Consent and data requests
Consents can be granted and withdrawn just as easily. Anyone can request an export or erasure of their data and follow its progress.
Uploads checked twice
Files are validated by extension and by their actual bytes, images are re-encoded, and display images are capped in size.
Standards-based sign-in
Identity is handled by a standards-based provider (OpenID Connect). The website never sees a password and the browser never holds a token.
Private files stay private
Photos and documents are served through an authenticated proxy and are never cached by the browser.
Rate limits
Sensitive or noisy actions, such as sharing content or requesting a password reset, are rate-limited.
One home for your whole community.
Set it up in an afternoon. Invite your people. Run it together.
Get started