Compliance, comps, and casework — one platform.

Browse Real-Time PHA Data

Pick your housing authority to browse its portal on live data. No account needed.

State Housing authority Or find your authority by typing

You only see your own state's communities and comps. Browsing writes nothing. Every determination is captured to an audit trail you can hand to HUD.

Compliance calendar

Three HUD deadlines land within seven months. The workspace keeps the clocks.

On OMB approval
36-hour cyber incident reportingNotify CIRT@hud.gov and your field office within 36 hours of a cyber incident.
Notice PIH 2026-17
Jan 1, 2027
HOTMA §§102 / 104 income and assetsThe $100,000 asset limit and $50,000 self-certification threshold bind PHAs; with 120-day reexam scheduling you collect to it from September 2026.
PIH 2026-15 · 24 CFR 5.618
Feb 1, 2027
NSPIRE for HCV, PBV and Mod RehabHUD's third extension sets the compliance date for the Housing Choice Voucher, Project-Based Voucher and Moderate Rehabilitation programs.
90 FR, Sept 30, 2025

Standing duties — EIV security training (PIH 2018-18), Privacy Act notices (PIH 2015-06) and the three-year rent-reasonableness record (24 CFR 982.158) — are tracked the same way. Open the compliance register →

The platform

One record for the resident, the unit and the money. Every module reads it.

Available means shipped and demoable today. Pilot and Planned are labelled as such and never shown as available.

Module directory →Resident tenancy pipeline, steps 01–09 →

Vendor comparison

Fifteen controls a HUD auditor asks about, checked against what twelve vendors publish.

Reviewed August 15, 2026 from each vendor's own pages.

An empty mark never says a vendor lacks a control. It says no public claim was found, and every cell links the page that was read.

Our column is graded the same way: SOC 2 underway, FedRAMP not claimed.

Published and in scope
Published, but scoped elsewhere
No public claim located
Adverse public record
Self-disclosure

Published security and compliance posture, twelve PHA software vendors — reviewed August 15, 2026
Control	RentSpirePHA Solutions	YardiVoyager PHA / RentCafe	MRI familyHAPPY · Tenmast · +2	EmphasysElite	PHA-Web/MCS	AffordableHsg.comformerly GoSection8	Nan McKay& Associates	NeighborlyHCV	KansoDoorways	SACS	CGI FederalCATS / OnCue	HDSEnterprise / NextGen
Data-layer controls
Row-level isolation enforced inside the database
Append-only audit ledger the application cannot rewrite
Stated case and stated purpose recorded on every protected read
Field-level sensitivity tiering of resident data
EIV training expiry enforced at the data layer
Access & encryption
Authenticator-app or hardware-key second factor, stepped up before sensitive access
Encryption in transit and at rest, both stated
Attestations & track record
Product-scoped, dated third-party attestation
FedRAMP Authorized for HUD
Published EIV / Privacy Act safeguard statement for its own platform
Trust center a procurement officer can actually read
Adverse public record on cybersecurity
Data & compliance currency
Public per-field data provenance page
Published comp methodology + nationwide building-level dataset
Dated HUD mandate tracker with weekly regulation watch

RentSpire cells marked ◊ are self-disclosures, not third-party verified. Hover any cell for its evidence. Ask us for the evidence, not the adjective — sales@rentspire.com

Do you hold SOC 2, FedRAMP or StateRAMP today?

None today. No HUD rule requires a PHA software vendor to hold them, and FISMA does not bind PHAs (44 U.S.C. 3554). Our third-party attestation is underway; we will publish the date and scope when it is real.

Why build it this way?

Because the record is not theoretical: ransomware at HACLA, twice; 212,910 people affected at Indianapolis Housing Agency; 189,008 at Cuyahoga Metropolitan; a confirmed compromise at the District of Columbia Housing Authority.

What do the labels mean?

Available is shipped and demoable today. Pilot is in production and still being hardened. Planned is scoped for a later release. Not configured is available but not enabled for your authority. Every count on this page is read from the production database at page load.

Who makes the final determination?

Your reviewer, always. This is decision-support output, not a certification; the PHA reviewer retains sole responsibility under 24 CFR 982.507. See the disclaimers.

Methodology

Every determination follows 24 CFR 982.507. Each rule links the governing text.

Unassisted comparables onlyNever other subsidized units; PIH 2020-19 exclusions applied.§ 24 CFR 982.507(b)

All nine comparison factorsLocation, quality, size, unit type, age, amenities, housing services, maintenance, utilities — each weighed with written reasons.HUD HCV Guidebook

Minimum three comparablesFrom a bounded local market (ZIP, city, then a 10-mile radius). Below three, no determination is issued.§ 24 CFR 982.507 / 983.303

Payment-standard band as contextThe 90–110% FMR/SAFMR band is shown beside the result; it is not the reasonableness test.§ 24 CFR 982.503 / 982.505

Field-level fill rates, provenance lineages and the source register are on the Data & Provenance page →

⚠

Disclaimers

Read before relying on any output from this workspace.

This workspace produces decision-support output, not a final rent reasonableness certification. A PHA reviewer must confirm every determination.
Comparables are real unassisted market listings from your state register (community name, city, rent, sqft, source URL, photo). Where a comparability factor has no structured data (e.g. amenities, quality tier, year built), it is disclosed as "not available — no adjustment applied" — never fabricated.
The PHA reviewer retains sole responsibility for the rent reasonableness decision under 24 CFR 982.507.
Comparables and methodology are retained for audit and included in the exported PDF determination.
Nothing here is legal advice. Consult your agency's counsel and adopted policies.
Headline numbers vs. the data page: the gate counters (e.g. “Usable market-rate comps”) read from mv_rr_apartment_headline, which counts in-pool apartment comparables. The Data & Provenance page reads from v_prov_kpi_rollup, which counts all rows in rr_comparables including excluded and community-record rows. These are different predicates — the numbers will differ, and both are correct for what they measure.