Searchable directory
Sort by name, role, or last login. Search across name, business, and custom fields.
Three perspectives — the member tapping a name on their iPhone, the admin running the community, and the operator keeping it secure.
The MemberDex iOS app is fast, quiet, and obvious. There is no feed, no notification spam, no "engagement loop." Members open it, find a person, and get on with their day. The roster is fully self-contained — it never merges into the iPhone Contacts app, so personal phone books stay personal.
Sort by name, role, or last login. Search across name, business, and custom fields.
Phone, text, email, website, and Maps directions — one tap each.
Members own their info: name, photo, contact methods, and any custom fields you allow.
Pinned links, social handles, schedule blurbs — your community at a glance.
Last-synced directory stays available without a signal.
Never writes to iPhone Contacts. Your community roster and personal address book stay separate.
New users can explore with sample data before signing in.
The admin SPA is built for people running communities, not full-time IT. Bulk operations, sortable tables, sensible defaults, and a real audit log so you can answer "what changed?" in seconds.
Sortable, paginated, with role filter, last-login column, and inline edit.
Preview the diff, fix what's flagged, then apply. No surprises.
Invite all, resend invitations, or send by group. Per-community rate limit configurable.
Define your own fields with type validation. Standard or custom templates.
Upload your logo, set colors, edit your community page with a live web preview.
Search by user, date, action. Sortable columns. Super-admin impersonation flagged in red.
The pieces you'd expect from a real product: backups, audit, exports, MFA, password policy, rate limiting, and a security posture we're happy to discuss in a meeting.
Download your whole community as a zip, restore it elsewhere, or keep it for compliance.
Streamed export up to 250,000 rows. CSV-injection escaped, so spreadsheet macros stay disarmed.
Per-admin opt-in with brute-force lockout (10 attempts / 15 minutes). Standard authenticator apps.
12-character minimum, two-category mix, common-blocklist, and optional HIBP breach check.
Login, invite, password reset, impersonation, restore, and admin action all recorded with details.
Stripe webhook delivery monitored end-to-end. Failed deliveries are surfaced and retry-eligible.
Admin SPA is served same-origin with the API. Origin-header guard rejects cross-origin browser writes.
Public-key pinning in release builds. Misconfigured deploys fail closed instead of falling back.
Row-level org tenancy. Cross-org access blocked even when paths are tampered with.
If something on this page doesn't quite fit your group's needs, we want to hear about it.