ChapterConnect runs on Cloudflare Workers with Cloudflare D1 for relational data and Cloudflare R2 for object storage. There is no server for a chapter to administer, no application to patch, and no single region to fail — requests are served from the location closest to the member making them.
Why this matters for a chapter
Volunteer officers inherit a system every year or two. A platform with nothing to maintain means a new officer does not inherit an unpatched WordPress install, a lapsed hosting renewal, or a database nobody can restore.
How data separation works
Every tenant-owned record is scoped to a chapter, and every protected operation re-verifies five things on the server: that you are authenticated, that you belong to the chapter you are asking about, that your chapter's plan includes the capability, that your role permits the action, and that you are allowed to see the specific record. Hiding a menu item is never treated as a security control.
The accounting boundary
ChapterConnect is not a general ledger and will not become one. Where accounting integration is enabled, existing accounting software such as Xero remains the system of record. Figures displayed inside the platform are operational views, not reconciled accounting balances, and they are labelled that way.