Privacy and security

This portal exists for one job: moving gap funding from the Volunteer Florida Foundation, through Collier Disaster Alliance, to Rebuild Florida for a specific home. Here is what it holds and how it is protected.

What is stored

• For each request: the Rebuild Florida case number, the household name, the property address, the amount, and the three documents Rebuild Florida provides (case write-up, release of information, award letter).
• For each payment: the check or money order number, amount, fee, dates, and photographs of the check, the purchase receipt, and Rebuild Florida's receipt.
• Nothing else about the household. No Social Security numbers, dates of birth, income, or household composition are collected anywhere in the system.

Who can see it

• Authorized staff of Rebuild Florida, Collier Disaster Alliance, and the Volunteer Florida Foundation, each invited by an administrator.
• Rebuild Florida staff see only their own organization's requests and documents.
• Every sign-in requires a password and a one-time code sent to the user's email address. Every sign-in, view, upload, change, and download is recorded with the user and time.

How it is protected

• All traffic is encrypted (TLS). Stored documents and the database are encrypted at rest and held in access-controlled cloud storage, not on the web server.
• Household information never leaves the portal: emails carry case numbers and amounts only, and reports are downloaded only by a signed-in administrator from inside the portal.
• Photographs have location data removed on upload. Nothing is ever deleted; corrections keep the prior version.
• The system is built to meet the safeguarding requirements for personally identifiable information in 2 CFR 200.303(e).

Questions

Contact Collier Disaster Alliance through collierdisasteralliance.org.