Payments
Every payment passes through enforcement guards, posts to an immutable ledger, and reconciles daily against the payment processor. Money moves directly between resident and HOA bank accounts. CommunityPay does not sit on funds.
Security & Infrastructure
Security & Trust
How CommunityPay protects association money and data: no fund custody, one pinned payout bank, a fresh authenticator code before money moves, encryption at rest, immutable audit trails, tenant isolation, consent-gated …
Payment Fraud Controls
The checks every resident payment passes before it reaches the gateway — velocity limits, a duplicate check, and a risk score — the retry rules for failed payments, and where …
Webhook Security & Signature Verification
Provider-specific webhook signature verification, rate limiting, payload size controls, and replay attack prevention for payment processor integrations.
Governance & Controls
Disbursement Authorization Controls
Approval tiers, a fresh authenticator code before money moves, a three-business-day wait on a changed vendor bank, an email to the board on every payment, and the FADR artifact that …
Accounting Controls
Bank Reconciliation Controls
Daily reconciliation between the payment processor and the general ledger, a nightly check that the ledger's processor sub-account equals what the processor holds, hourly payout-bank checks, and the month-end bank …
Accounts Receivable Lifecycle Controls
End-to-end AR management from invoice generation through payment application, late fee enforcement, payment plans, and institutional aging analysis with collection effectiveness metrics.