CommunityPay

The System of Record for Financial Risk Governance

Financial risk governance infrastructure for community associations — payments and accounting systems that govern how money moves, record every decision, evaluate counterparty risk, and enforce statutory compliance. Every entry is evaluated against 18 enforcement guards before it posts. No guessing who paid. No reconstructing what happened. One ledger. One truth.

The Problem

Most HOA accounting is done in spreadsheets, fragmented across bank accounts, or locked inside software that records transactions but doesn't govern them.

Board members carry personal fiduciary liability for financial decisions they can't see, can't verify, and can't prove.

Spreadsheets no one trusts Single auditable ledger
No record of who approved what Every decision logged with evidence
Board turnover erases history Permanent institutional memory
Errors surface at audit Issues visible in real time
CPAs reconstruct from bank statements Audit-ready from day one

How It Works

Every transaction flows through an enforcement dispatcher before it posts to the ledger. The dispatcher evaluates the transaction against a chain of guards — balance verification, fund segregation, closed period checks, covenant compliance, vendor risk — and logs an immutable decision record.

  • i. Transaction enters the system
  • ii. Enforcement dispatcher evaluates against guard chain
  • iii. Decision logged: allowed, blocked, or overridden
  • iv. Journal entry posted with full audit trail
  • v. Immutable record preserved for CPAs, auditors, and boards
An entry with no decision beside it was not a decision that went unrecorded.
It is the signal that something bypassed the choke point.

Who It Serves

Homeowners and Board Members

Stop guessing who paid and when. Stop worrying about personal liability.

Every assessment, payment, and vendor disbursement is tracked in a single ledger. Every financial decision is enforced by policy and documented permanently. Board transitions don't erase history.

CPAs and Auditors

Audit-ready from day one. Token-gated portal. Immutable trail. Integrity scans.

Secure read-only access to trial balances, journal registers, fund reconciliation, and AR/AP aging. Every journal entry links to its enforcement decision. Daily integrity scans verify GL health automatically.

Title Companies and Escrow Officers

Resale certificates in seconds, not weeks. API or board-approved workflow.

Statute-compliant RCs generated from live ledger data across 10 states and 14 compliance profiles. Title companies POST a request, the board reviews disclosures, the certificate generates, and a signed callback fires — all within hours.

Lenders and Insurers

CARI scores derived from actual ledger data, not self-reported surveys.

The Community Association Risk Index computes HOA health from five weighted components — financial health, governance, vendor risk, enforcement integrity, and payment behavior — all derived from live platform signals. Consent-gated API access with real-time webhook notifications on score changes.

What's Built

This is not a roadmap. This is production infrastructure.

  • i. Double-entry fund accounting with 18 enforcement guards
  • ii. Resale certificates — 10 states, 14 statutory profiles, live ledger data
  • iii. CPA audit portal — token-gated, read-only, 14 sections
  • iv. Bank feed and statement import — BAI2, OFX, CSV, matched one to one by machine, completed by a person
  • v. Vendor payments from the association's own Stripe Connect balance to the vendor's bank — routing and account number only, no vendor account
  • vi. Enterprise debt subledger — event-sourced, deterministic math, covenant evaluation
  • vii. Reserve funding reports with 30-year projections
  • viii. CARI risk index — 5-component scoring, external API, 4 report types
  • ix. BuildRated vendor intelligence — license, bond, and insurance records for Washington and Oregon contractors, VECR attestations
  • x. Title company inbound API — board review workflow, HMAC-signed callbacks

Every artifact — resale certificate, reserve report, close evidence pack, vendor attestation — includes a SHA-256 content hash. Verifiable. Reproducible. Permanent.

See the platform.
Read the principles.

The principles only matter if the work matches them. Both are open to inspection.

Login