Eleven modules. One source of truth.
Every part of running a community in one place — tightly integrated so a vote can fund a project, a payment can settle an invoice, and a panic alert reaches everyone instantly.
Members & tenants
Every community is its own tenant with strict data isolation. Residents own their profile, trustees control who joins, and every role has its own permissions.
- Magic-link sign-in, MFA challenge, and forgot-password flow built in
- Tenant slugs route every URL:
/greenside/treasury - Five built-in roles: resident, moderator, treasurer, protection lead, admin
- UUID invitations with 7-day expiry, audited end to end
- Per-user appearance themes — light, dark, and admin-curated palettes
- POPIA-aligned profile export & deletion on request
Messaging & presence
WhatsApp-style chat that respects roles, retains history, and doesn't dump notifications at 2am. Edge-to-edge bubbles, floating composer, the lot.
- Threaded chat per room: community, announcement, DM, group
- Emoji picker, reactions, @-mentions, DM presence indicator
- WhatsApp-style bubbles with timestamps below; floating composer
- Announcement rooms reach every resident at once
- Quiet hours and digest mode for non-emergency channels
Treasury, ledger, levies
A real double-entry ledger — not a spreadsheet. Every cent in or out leaves an immutable trail. Trustees sleep easier; auditors smile.
- Wallets: treasury, budget, reserve, member
- Dual-control approvals on amounts ≥ R 5,000
- Recurring contributions (monthly levies, special assessments)
- Per-project budgets with allocation tracking
- All amounts as
bigintcents — no floating-point drift
Proposals & voting
Move trustees' meetings out of WhatsApp. Open a proposal, set the voting method, watch the count update live. Closed proposals freeze permanently.
- Five voting methods: simple majority, two-thirds, three-quarters, unanimous, plurality
- Proposal types: standard, rule change, budget, election, poll
- Attach supporting documents (PDFs, images) to any proposal
- Versioned Constitution & T&Cs with onboarding acceptance gate
- Votes are immutable once cast — no rewriting history
Trade & procurement
An internal marketplace for community vendors plus a structured RFQ flow for bigger spends — with escrow built on the Economy ledger.
- Listings with full-text search and inter-community visibility
- Personal marketplace — residents trade directly, separate from community store
- 10-state order machine, auto-numbered invoices
- Escrow integration: funds released only on delivery
- Procurement RFQ with bid comparison and audit trail
- Immutable reviews with one allowed vendor response
Protection & panic
The module no community wants to use but every one needs. Panic, alerts, incidents, patrol logs — all geolocated, all routed instantly.
- One-tap panic with auto-broadcast to protection lead
- Faults reporting — residents log streetlights, potholes, water leaks; admins triage
- Six incident states, auto-numbered
INC-YYYY-NNNNN - Patrol logging with on-duty / responding / on-break presence
- Heatmap RPC for trend analytics
- Critical & emergency priorities bypass user opt-outs
Projects & volunteers
For the solar panel install, the playground refurb, the road resurfacing. Milestones, tasks, volunteer hours, treasury funding — one workspace.
- Kanban tasks: todo, in progress, in review, done
- Volunteer hours logged via atomic counters
- Direct treasury contribution — posts to the ledger
- Nightly cron flags delayed projects automatically
Admin (municipal)
For ward councillors, municipal liaisons, and groups overseeing multiple communities — with strict access scoping and audit.
- Group-scoped access: see only communities in your portfolio
- Federated moderation queue across communities
- Aggregate health metrics per group
- Export tools (within group)
Notifications
One central engine renders every event into per-recipient deliveries — respecting quiet hours, digest mode, and channel preferences. Emergencies bypass all of it.
- 21 seeded templates, parametrised with handlebars
- Channels: in-app, email, push (FCM/APNs/Web), SMS via BulkSMS (SA-local)
- Phone numbers normalised to E.164 before SMS dispatch
- Five priorities: low, normal, high, critical, emergency
- Critical & emergency ignore user opt-outs — by design
Analytics & health
Composite engagement and health scores per community, plus per-module dashboards for treasurers, protection leads, and admins.
- Immutable event stream rolled up nightly
- Per-tenant KPI snapshot & 90-day timeseries
- Health score across engagement, governance, finance, safety
- RBAC-gated report exports (CSV, PDF)
Super Admin (tribe.one team only)
The control plane our own team uses to run the platform: subscriptions, billing, feature flags, support, and forensic-grade impersonation.
- Five-tier subscription catalog with usage-based metering
- Feature flags with 5 rollout strategies
- Support tickets with SLA tracking
- Impersonation with 1-hour hard cap and IP/UA audit
- Separate audit log — never mixed with tenant data
Modules don't just sit next to each other — they wire together.
A vote can release a project budget. A paid invoice posts to the ledger. A panic alert reaches every device in seconds. One audit trail covers all of it.
Cross-module events
Every action fires analytics and notifications fire-and-forget — observability without blocking the user.
Single audit trail
Tenant-scoped audit log + platform-level audit log. Append-only, never editable, ready for any compliance request.
Strict isolation
Three-layer tenant isolation: URL routing, request headers, and Postgres row-level security — all three must pass.
Want to see it running on your community's data?
Book a 30-minute walkthrough with a real treasurer's books loaded into a sandbox. No commitment.