What financial information your HOA website should (and shouldn’t) show owners

About 78.1 million Americans live in roughly 373,000 community associations, which together cover 29.6 million housing units. Every one of those households pays into a budget. In 2025, associations collected about $124.2 billion in assessments. When that much money passes through volunteer boards, owners naturally want to know where it goes.

And frustration over rising HOA monthly fees is usually less about the dollar figure than about not understanding the reasoning behind it. Posting your HOA budget, financial statements, and reserve information online answers that question before anyone has to ask. This is where boards get stuck, because transparency has limits.

Boards handle Social Security numbers, bank details, and card data, and mishandling them can expose the association, and sometimes individual directors, to real liability. Security matters too. CAI research found that ransomware and phishing are the most common attacks on associations, so every file you publish should be a deliberate choice.

In some states, the decision has already been made for you. Florida HOAs with 100 or more parcels have had to maintain a website or app since January 1, 2025. Condo associations with 25 or more units had to follow on January 1, 2026, down from the old 150-unit threshold. Required records, including the current budget and year-end financial reports, must be posted within 30 days of receipt or creation. Any protected information inside a posted document has to be redacted first. Other states will likely watch how this plays out.

So the real question isn’t whether to be open online. It’s how much to show and where to draw the line. This guide covers:

• Which financial documents belong on your HOA website
• What should never be posted
• How public pages, owner portals, and board-only areas should divide the work
• How to keep financial files out of search engines

What financial information your HOA website should show

Post the documents that show where assessment money comes from, where it goes, and what’s being saved for the future. Regulators are spelling this out. Florida’s condo regulator lists the annual budget, the annual financial report, any monthly income and expense statements slated for a meeting, and the latest structural integrity reserve study as required postings. Most other states already give members access to similar records, at minimum the current budget, an income and expense statement, receipts records, and a balance sheet. Those categories are the backbone of any HOA transparency page.

Annual budget and proposed budget

The HOA budget is the first thing owners look for, and in several states it’s also the most tightly regulated document. California requires an annual budget report with a pro forma operating budget showing estimated revenue and expenses on an accrual basis. It goes to members 30 to 90 days before the fiscal year ends, along with an Assessment and Reserve Funding Disclosure Summary.

Florida puts the budget online. Condo associations must post the annual budget and any proposed budget for the annual meeting, and HOAs must do the same on their own sites. Posting both versions lets owners see what’s changing before the vote rather than after it. In my experience, owners accept increases far more readily when the reasons are laid out for them. Clear HOA budgets prevent a lot of angry emails.

So for this one, I suggest you post the approved and proposed budgets as separate, clearly dated files. Add a short plain-language note on the biggest line-item changes.

Financial statements

An HOA budget is a plan. HOA financial statements show whether the board is following it. Boards should understand three reports:

• Balance sheet: a snapshot of financial position on one date, built on assets = liabilities + fund balance. If you’d like to see how one is laid out, search for an HOA balance sheet example from your management company or CPA.
• Income statement: money in versus money out over a period such as a month or the year to date. The most useful version compares actual spending with the budget and shows the variance.
• Cash flow statement: shows the cash side, which matters because an association can look fine on the income statement while still being short on cash.

The rigor of year-end reporting depends on state law and association size, so check the homeowners association financial statements requirements that apply to you. Under Florida HOA financial reporting requirements, the tiers work like this:

Annual revenue	Required year-end report
Under $150,000	Report of cash receipts and expenditures
$150,000 to $300,000	Compiled financial statements
$300,000 to $500,000	Reviewed financial statements
$500,000 or more	Audited financial statements

Since July 1, 2024, Florida HOAs with 1,000 or more parcels must be audited regardless of revenue. In California, a CPA review is required for any fiscal year with gross income above $75,000.

Summary reports are generally enough for a website. Utah’s HOA Ombudsman has advised that balance sheets, cash flow statements, and income statements are the core records owners are entitled to, rather than transaction-level detail. If your board wants a head start, a condo association financial statement template from your CPA or manager can keep the monthly package consistent. That said, my website tip is that you publish the latest monthly or quarterly statements plus the year-end report. Label each file with its date and reporting period.

Reserve study summary and funding plan

If you’re asking what is a reserve study, it’s the long-range plan for repairing and replacing community-owned components, typically projecting 30 years or more. It lists those components, estimates replacement costs, and lays out a funding plan. Strength is measured as “percent funded,” the reserve balance compared with the fully funded balance.

That figure and the recommended contribution usually appear in the executive summary, which makes the summary the natural thing to post. A condominium reserve fund study works the same way. It simply covers the building and shared elements of a condo.

Reserve data is hard for most people to read. In a recent FCAR snap survey, 64% of respondents named communicating funding needs as a top challenge, and only 9% said owners understand reserve studies very well. 40% had been asked for their study by a lender or insurer. Pressure is also coming from the legal and lending side:

• Florida: condo associations must post their most recent structural integrity reserve study and deliver it to each owner within 45 days of receipt. Florida HOA reserve study requirements are different. The structural integrity rules are a condo requirement, so HOAs should check their declaration and state statute.
• California: the study is required now, but mandatory funding rules don’t begin until January 1, 2032.
• Lenders: Fannie Mae’s March 2026 Lender Letter LL-2026-03 raises the minimum reserve allocation for condo financing from 10% to 15% of annual assessment income, starting with applications dated January 4, 2027. A reserve study completed within three years can be relied on, and the budget must reflect its highest recommended allocation.

A current, easy-to-find summary helps owners who are selling or refinancing, not just curious ones. If you’re shopping for an HOA reserve study company, ask whether they’ll prepare a one-page owner summary. You can also look for an HOA reserve study sample that shows exactly how that summary should look.

For the HOA web, I suggest you post the executive summary and a one-page funding overview with the study date, percent funded, and annual contribution. Keep the full study in the owner portal or available on request.

Insurance summary

Insurance is one of the few financial topics where owners’ own money is directly exposed. California requires the annual budget report to summarize the association’s property, general liability, earthquake, flood, and fidelity policies, listing the insurer, coverage type, limit, and deductible for each.

The summary must warn that it doesn’t replace the actual policy and that the association’s coverage may not protect an owner’s belongings or upgrades. Owners must also be notified if a policy lapses or is canceled. Owners care because the master policy rarely covers everything. A condo unit is usually covered by the association’s master policy plus the owner’s own HO-6 policy. If a loss exceeds the master limits, the association can assess owners for the gap.

A loss assessment add-on to an HO-6 can cover that share. Lenders also examine association insurance, reserves, delinquencies, and special assessments more closely than they used to. So post a one-page summary per policy with carrier, coverage type, limits, deductible, and policy period. Update it at every renewal.

Contracts, bid summaries and vendor lists

Florida requires associations with mandatory websites to post a list of executory contracts and, once bidding closes, the bids received over the past year. Summaries of bids over $500 must stay up for a year, and full copies can be posted instead. Florida HOAs with 100 or more parcels must also list contracts between the association and any director, officer, or business in which a director holds an interest.

Publishing the bidding record doesn’t mean publishing everything in it. California lets associations redact vendors’ bank and tax ID numbers, and Florida requires protected data in posted documents to be redacted first. So post a current vendor list (name, service, term, annual cost), a bid summary table for larger projects, and the contracts themselves with account and tax details blacked out.

Collection and payment policies

Owners should know how payments are handled before anyone falls behind. In California, the collection policy is part of the annual policy statement and covers late charges, interest, collection costs, payment plans, and the owner’s right to dispute a debt. Payment order is regulated too.

It’s also smart to post a plain explanation of your process, including what an HOA delinquent dues letter says, when it goes out, and how an owner can respond. One thing must never appear alongside that policy: the names of delinquent owners. A CAI columnist has called publishing a delinquency list generally a horrible idea, even where governing documents allow it.

California’s Davis-Stirling Act bars publishing names once the board has voted to foreclose and doesn’t expressly ban it otherwise, though the safest course is not to publish. Some states, including Florida under its Consumer Collection Practices Act, restrict posting debtor lists.

Website tip: Post the collection policy, due dates, accepted payment methods, the late-fee schedule, how to request a payment plan, and how to dispute a charge. If you report overall delinquency, show totals only, never names or units.

What your HOA website should not show

A good HOA site lets owners find budgets, minutes, and governing documents in seconds. But the same site can become a privacy and legal liability if it’s careless. These are the categories to keep off public pages, and sometimes off owner-only pages too.

Personal identifiers and payment data

Start with what does the most damage if it leaks. Florida’s condo law protects owners’ phone numbers, email addresses, driver’s license numbers, card numbers and Social Security numbers. California lets associations withhold or redact anything likely to enable identity theft, including member or vendor bank account numbers, Social Security or tax ID numbers, and check and credit card numbers.

Online payments add a second layer of rules from the card industry. Under PCI DSS, sensitive authentication data such as the card security code can’t be stored after authorization, even if encrypted. When a card number does display, it must be masked. In practice, a payment screen should show the last four digits at most, and no page should ever show a full bank account number.

Individual owner balances and payment histories

Owners reasonably expect to see their own balance and payment history online. They shouldn’t see their neighbors’. Ledger details belong behind an individual login, not on a shared “owners only” page.

The law supports this separation. California lets associations withhold collection and payment-plan records for members other than the one requesting them. A New Jersey attorney makes the same point: an owner can review a compilation of the association’s financial records but not another unit’s account. The cleanest setup is to put association-wide financials in the portal and each owner’s ledger in a private account.

Delinquent owner lists with names

A “deadbeat list” is tempting because peer pressure works, but it’s also where boards take on the most risk. The federal Fair Debt Collection Practices Act bars debt collectors from publishing lists of nonpayers. It generally excludes creditors collecting their own debts, but CAI notes that if a court treats the association or its management company as a debt collector, a posted list could be treated as blacklisting. There’s an accuracy risk too. A wrong list can invite a defamation or privacy claim.

Attorney-client privileged material and litigation strategy

Some of an association’s most sensitive records are the ones it creates with its lawyer. Florida’s condo law excludes attorney-client privileged and work-product records from owner access. Litigation strategy records stay protected until the proceeding ends. California likewise lets associations withhold privileged opinions, legal invoices, litigation documents, and confidential settlements.

Legal invoices are the easiest place to slip. A full bill can reveal more than a dollar amount, and one Florida arbitrator opined that parts of invoices may be redacted when the descriptions reveal the attorney’s thinking. Leave those calls to counsel, not the webmaster.

Don’t swing too far the other way, though. Labeling routine financial records “confidential” without a legal basis is a common overreach. A good rule: total legal spend belongs in the financial reports, while advice, strategy, and detailed billing narratives don’t belong on the site.

Personnel records and individual pay

Florida’s condo and HOA statutes both keep employee personnel records, including payroll, discipline, health and insurance details, away from owners. But the nuance is that written employment agreements and budget records that show compensation generally remain inspectable. California draws a similar line, listing pay by job title rather than by name.

For a website, the approach is simple. Show compensation as budget line items like “on-site manager” or “groundskeeping staff,” and keep payroll files, evaluations, and disciplinary notes off the site.

Personal data hidden inside financial documents

The hardest leaks to catch are buried inside documents you’re required to post. In Florida, information owners aren’t entitled to see must be blacked out before a required document goes online. Scanned checks, bank statements, collection ledgers, and vendor invoices are the usual culprits. Check each one before it enters the financials folder.

Raw accounting files and unredacted bank statements

Owners are generally entitled to summaries, not every underlying transaction. Utah’s HOA ombudsman said as much in a 2026 advisory opinion, where an owner had asked for bank statements and transaction registers. Associations owe members the core statements but not every receipt or contract.

Some states give owners more. California’s SB 410 added bank and credit card statements to the records owners can request as of January 1, 2026. Even there, the right is to request records, not a mandate to publish them, and the association can charge the reasonable cost of redaction.

What your state says owners can’t access

There’s no national list, but exceptions overlap heavily:

• Florida (condos): privileged records, personal identifiers, medical records, electronic security details like passwords, and personnel records.
• California: privileged information, personnel records, other members’ disciplinary or collection records, and privacy-compromising information.
• Texas: attorney files (with an exception for requested invoices), owner violation history, personal financial information, contact details beyond the address, and employee files, though aggregate information may be released.
• Arizona: privileged communications, pending litigation, closed-session records, and health, personal or financial records of an individual member or employee.

Public page vs. member-only portal

Attorneys generally split an association site the same way. Routine items such as the event calendar, meeting agendas, and contact details can live in the public area. Governing documents and anything financial belong in a members-only area protected by a username and password. That secure area becomes essential once owners can view assessment accounts or pay online.

In some states, this is now law. Florida’s rule, effective January 1, 2026, requires condo associations with 25+ units to maintain a site with a password-protected section closed to the general public. Only owners and association employees can enter, and the association must issue credentials when an owner asks in writing. The annual budget, proposed budgets, and financial reports must be posted there.

Even inside a members-only area, not everything goes up. Privileged or litigation-related material can’t be shared. Executive-session minutes must generally be kept but not shared. And in many states, owners can’t demand information about individual homeowners, such as a delinquent list.

Default to members-only. Many associations end up with everything public, financials included, or nothing online at all. A basic “Documents” page beats email but usually lacks access controls. This is why thoughtful HOA website design matters. Good HOA web design builds permission levels in from the start rather than bolting them on later.

If your site uses analytics or tracking tools, you may also wonder, “do I need a cookie banner on my website?” The answer depends on your tools and where your owners live, so raise it with your attorney when you review privacy practices.

How to verify owners before they see financial documents

The strongest setup is to check each sign-up against your own owner records rather than letting anyone register. Common methods:

• Match-based registration: the owner enters an address or assessment account number that must match your records, often with an emailed verification code.
• One-time login codes: each code expires quickly and works once.
• Two-factor authentication (2FA): after the password, the portal asks for a code from the owner’s phone, so a stolen password isn’t enough.
• Written request: where the law requires it, as in Florida, the association hands credentials to owners who ask in writing, which adds a manual check.

Frequently Asked Questions

Do homeowners have a right to see HOA financial records?

Yes, though state law defines which records, how to request them, and what you can charge. At a minimum, members can expect the current budget, an income and expense statement, receipt records, and a balance sheet. Attorney-client communications and an individual member’s personal financial records can be withheld.

Are HOA documents public record?

Not in the way government records are. HOA records are private to the association, but members generally have statutory rights to inspect them. Rules on how to get HOA documents vary by state. Owners typically submit a written request, and the association responds within a set timeframe. Some states also allow a fee for resale packages, so check your state’s rules on any HOA disclosure fee.

How long does an HOA need to keep records?

It depends on your state. California requires the current fiscal year plus the two previous years. Florida mandates seven years for minutes, financial records, and insurance policies. Arizona requires three years for financial records and minutes. Bylaws can require longer retention than the statute but never shorter. If you’re asking how long an HOA needs to keep records beyond that, confirm with your attorney before purging anything.

Can an HOA post a list of delinquent owners?

It’s strongly discouraged and prohibited in some places. A wrong list can invite defamation or privacy claims. Owners are generally entitled to overall financials, not individual accounts.

Should HOA financials be public or password-protected?

Password-protected is the safer default. Some states, like Florida for condos, require a password-protected section.

Can the HOA charge for copies?

Usually yes, but states often cap the amount. Arizona allows no charge for review and up to 15 cents per page for copies. Florida HOAs may charge up to 25 cents per page for copies made on their own copier, plus personnel costs if retrieval and copying exceed 30 minutes, capped at $20 per hour. California allows reasonable copying costs within limits.

What must be redacted before posting?

Anything that could enable fraud or identity theft, plus privileged and personal data. California allows redaction of bank account numbers, Social Security and tax ID numbers, and check and card numbers. One caution on vendor payments: California generally doesn’t allow redacting compensation paid to employees, vendors, or contractors.

Is an HOA required to have a website?

In most places, no, but a growing number of states require one. Florida is the clearest example, with the 2025 and 2026 deadlines described above. California has no specific HOA website rules, so check your own statute and governing documents.

How often should financial reports be updated online?

Follow the law where it sets a deadline. Florida’s condo rule requires posting within 30 days of receipt or creation. Elsewhere, CAI’s best-practices guidance suggests boards request statements from the manager or accountant at least quarterly and share reasonably detailed budget and reserve summaries with owners annually.

What’s the difference between compiled, reviewed and audited statements?

It’s the level of assurance a CPA provides. A compilation offers none, a review gives limited assurance, and an audit gives high but not absolute assurance backed by an opinion. Cost rises with each level, and some governing documents or states require a specific tier.

Final thoughts

Strong financial transparency isn’t about posting everything. It’s about posting the right things, in the right place, in a form owners can understand. Show the budget, the statements, the reserve summary, the insurance summary, vendor information, and your collection policy. Keep personal data, owner ledgers, privileged legal material, personnel files, and raw bank records protected. Put it all behind sensible access levels, and have your attorney confirm what your state requires.