Visitor access, dues, amenities, announcements, and the record behind all of it. Posta replaces the paper logbook, the spreadsheet, and the group chat with one system your board can audit.
An entry log, a dues receipt, and a household roster are all sensitive, so the same boring guarantees cover every module — and the decisions that matter are attributable to whoever made them.
01
Authorization on the server, always
Every request is checked server-side and again at the database layer. What the app hides is a convenience; what the server refuses is the actual rule.
02
One neighborhood cannot see another
Tenant isolation is enforced on every data path, not just filtered in the interface.
03
A QR code is authorization, not identity
Passes are opaque artifacts validated online. A pass proves someone was authorized to enter — it never stands in for who they are.
04
It keeps working without a signal
The app stays usable offline: what it has already loaded is readable, and it says plainly what needs a connection.
05
Sensitive media stays private
Evidence photos are private files served through short-lived links, with retention limits. Never a public URL.
06
No tracking, no ad SDKs
No analytics, advertising, or cross-app tracking SDKs in the app. No advertising identifiers, and we do not sell personal information.