Security
How we protect an association's records, in plain words. Written for board members and for the person at a management company who asks. Last reviewed October 10, 2026.
The short version
- Every page is served over HTTPS. Plain
http://is redirected before anything loads. - Passwords are stored only as salted hashes. Nobody at Condo Notice Board can read one.
- Each association's records are separate. An owner's login opens only that owner's association.
- Owners-only records stay behind the login. Meeting notices are public because the law says so.
- The database is copied every day and kept 30 days, plus a nightly copy to a server outside Cloudflare.
- The board can download everything as a zip at any time. 60 days after cancelling, everything is deleted.
- We never sell, rent or share an association's data. There are no ads and no trackers on association websites.
Where the records live
Condo Notice Board runs on Cloudflare: the application on Cloudflare Workers, the database on Cloudflare D1 and the files (PDFs, images, meeting videos) in Cloudflare R2. The sales site you are reading is on Cloudflare Pages. We do not run our own public servers for the product, so there is no box in a closet for someone to break into.
Connections
- HTTPS on every page of the console, every association website and this site. A request over plain
http://gets a redirect tohttps://and nothing else. - Browsers are told to use HTTPS only for a year after the first visit (HSTS).
- A content security policy limits where scripts, styles and images may come from, and no other site can show our pages inside a frame.
Logins and passwords
- Every board member and every owner has their own login. Nobody shares a password.
- Passwords must be at least 10 characters. They are stored as salted PBKDF2 hashes (100,000 rounds) and are never written to a log or an email.
- New logins come from a link that works once: 14 days for a board member, 30 days for an owner. After that the board sends a new one.
- After 8 wrong tries on a login, that login waits 15 minutes.
- A board login stays signed in for 14 days, an owner login for 30. Changing a password signs out every other device.
- The board can remove a board member's or an owner's login at any moment, and it stops working at once.
- Not built yet: a second step at login (a code by email). Tell us if your board or your manager needs it.
Who sees what
- Each record is either owners only (the default) or public. The board decides per record. Meeting notices are public by default because Florida law requires them to be.
- Owner names and emails are never shown on the public website.
- The board console and the owners' area carry a
noindexinstruction, so search engines do not list them. - Every action in the console (post, remove, add an owner, change a setting) is written to an audit log with who did it and when. The printable posting record is built from that log.
Files
- Allowed uploads: PDF, JPG, PNG, Word, Excel and plain text for records; MP4, MOV and WebM for meeting videos. Anything else is refused.
- Before a file is posted, we read it and point out anything that looks like personal information (an account number, a social security number, a home phone) so the board can decide. The board always decides; nothing is removed or posted automatically.
- That review, and the Spanish translation of the association's pages, run on Cloudflare's own AI models inside Cloudflare's network. Files are not sent to an outside AI company.
Outside services, the whole list
- Stripe takes payments. Card numbers go to Stripe directly; we never see or store them.
- Resend sends our email. The domain publishes SPF, DKIM and DMARC records so mail from us can be checked.
- Google Fonts supplies the typefaces.
- Cloudflare does everything else, as described above.
That is the complete list. Association websites carry no analytics at all. This sales site uses analytics we host ourselves, with no cookies.
Backups and leaving
- Every day the whole database is copied inside Cloudflare, and 30 days of copies are kept.
- Every night the database and the posted records (PDFs and images; meeting videos stay in Cloudflare only) are also copied to a server we run outside Cloudflare, so losing the Cloudflare account would not lose the records.
- A board can download every record and the owner list as a zip from Settings at any time, for any reason.
- 60 days after a subscription ends, the association's files and database rows are deleted automatically. The Terms of Service say the same thing.
Watching it
An outside monitor checks the service every minute and tells us the moment it fails. Unhandled errors in the application email us. Service status and incidents are answered at [email protected].
What we do not claim
We do not hold a SOC 2 report or any security certification, and we do not claim one. Florida's Division of Condominiums does not approve, certify or list website providers; a vendor who says otherwise is mistaken. What we can show is the list above, the audit log in the console and the posting record a board can print.
Reporting a problem
If you find a security problem, write to [email protected] with what you found and how to reproduce it. We read it the same business day and reply as soon as we have looked. The same contact is published at /.well-known/security.txt on every host we run. Please do not test against a real association's data; ask us for a test account instead. We do not pay bounties, and we will thank you by name if you want.
Mail: Condo Notice Board, Fulcrum Enterprises LLC, PO Box 24, Floral City, FL 34436. Condo Notice Board is a private company, not affiliated with the State of Florida or any government agency, and does not give legal advice.