Security at OnlyNeighbors
How we protect your community's data
Community Privacy
OnlyNeighbors is built from the ground up to keep neighborhood data private and secure. Each community is completely isolated from others.
Neighborhood Isolation
Each neighborhood operates on its own subdomain with complete data separation. There is no cross-neighborhood data sharing.
Resident-Only Access
New members must be approved by neighborhood administrators. Only verified residents can access community content.
Protected Information
Contact information and addresses are only visible to approved members of your neighborhood.
Technical Details
Authentication
- Passwords hashed with bcrypt
- Account lockout after failed attempts
- Email confirmation required
- Magic link login option
- Time-limited password reset tokens
Encryption
- TLS encryption on all pages
- HTTPS enforced in production
- Sensitive data encrypted at rest
- Secure, HTTP-only cookies
Access Controls
- Role-based permissions
- Feature-level access controls
- Rate limiting on all requests
- Login attempt throttling
Infrastructure
OnlyNeighbors runs on trusted cloud infrastructure with security best practices.
| Application | AWS EC2 |
| Database | AWS RDS |
| File Storage | AWS S3 |
| CDN & Security | Cloudflare |
Third-Party Services
We integrate with trusted third-party services to provide functionality. We share only the minimum data necessary.
Postmark
Transactional email delivery for notifications and account emails.
Sentry
Error tracking to help us identify and fix issues quickly.
Stripe
Payment processing for subscriptions. We never store credit card numbers on our servers.
Software Development
We follow security-focused development practices to catch vulnerabilities before they reach production.
- Version-controlled code with automated checks
- Automated security scanning
- Dependency vulnerability checks
- Continuous integration testing
Data Retention
We retain your data only as long as necessary to provide our services.
Account Data
Your profile and personal information are retained while your account is active. When you delete your account, your personal data is removed immediately from our live systems. Certain community content, such as announcements, may be preserved. Backups expire within 14 days.
Neighborhood Data
If a neighborhood cancels their subscription, all community data is deleted immediately from our live systems. Backups containing this data expire within 14 days.
Backups
Database backups are retained for 14 days for disaster recovery purposes and are encrypted at rest.
Frequently Asked Questions
Not at this time. While we follow industry security best practices, we do not currently hold formal certifications. We are transparent about our security measures on this page.
Only approved members of your specific neighborhood can see your information. Your data is never visible to other neighborhoods or the public.
No. Each neighborhood is completely isolated. There is no way for residents of one neighborhood to access another neighborhood's posts, events, documents, or member information.
Please email security@onlyneighbors.com with details of the vulnerability. We take all reports seriously and will respond promptly.
Have security questions?
We're happy to discuss our security practices in more detail.