Encrypted connections
The website and portal use HTTPS to encrypt information as it travels between your device and the service. Our database and file-storage provider, Supabase, also encrypts stored data using AES-256.
Security and trust
How we protect your information.
Community Ready uses several layers of protection across the public website and administration portal: encrypted connections, secure sign-in, carefully scoped permissions and checks on the information we receive.
Last reviewed 30 September 2026
Protected sign-in
Community portal users sign in with one-time codes sent to their email address. The Portal Owner must use a password and an authenticator app. Active membership and the correct sign-in method are checked before portal access is granted.
Access matched to responsibility
Community Admins, delegated Admins and Event Owners have different permissions. Server checks and database access rules restrict access according to the community, role and assigned responsibilities, including the Local Groups or events a person manages.
Private submissions
Personal details sent through community forms are kept separate from published content. Authorised community administrators can access submissions for their community and responsibilities. A Portal Owner using password and authenticator verification can open a selected community workspace with Community Admin access, including submissions, Forms and the community archive.
Safer forms and content
Form inputs and uploaded content are checked, and rich text is filtered to reduce harmful code. Browser security rules help prevent unauthorised scripts and deceptive embedding of the website. Rate and size limits on sign-in and submission routes help reduce automated abuse.
Backups and accountability
Automated backups are configured to copy the database and uploaded files to separate storage. An audit history records administrative changes to help investigate problems.
Learn more about our providers' protections: Vercel HTTPS encryption and Supabase data security. These describe the providers' services; they are not certifications of Community Ready.
Public and private information
Know what you are sharing.
Security controls protect restricted information. News, events and other published community content are intended to be read publicly.
Files used in public content
Images and documents uploaded to the public content store can be opened by anyone with their file link. Unpublishing a page or removing a minutes entry does not necessarily remove its file. Use these tools only for material suitable for public access, and never for confidential documents.
Information sent to your community
Help requests, offers of help and other personal submissions are not public posts. The receiving community is responsible for how it uses that information. Exceptional technical access is limited to documented community instructions, security incidents or legal requirements. Our Privacy notice explains who handles your information and how to exercise your rights.
Keeping your account safe
A few simple steps help.
Protect the email account you use to sign in, keep login codes private and sign out on shared devices. Treat private review links like passwords: anyone holding a valid link may be able to use it.
If you suspect a security problem, email adam@communityready.co.uk. Describe what happened and which page was involved, without sending passwords, login codes or other people's personal information.
No online service can guarantee absolute security. We review and improve our protections as the service develops. Community Ready supports local communication and preparedness; in an emergency, call 999 and follow official instructions.
Have a security or data question?
We can explain how access and information handling work for your community or organisation.