How your congregation’s data is protected

This page describes mechanisms, not certifications. We hold no compliance certification and will not imply one — what follows is what the software does, which you can hold us to.

Separation between churches

Every table is separated by row-level security in Postgres, keyed on the signed-in person’s membership. The separation is in the database rather than in the application code, which means a screen that forgets to filter returns nothing rather than another church’s records.

What we cannot read in the ordinary course of running the platform

  • Direct messages

    Private to the two people in them. Not to your church owner, and not to us.

  • Personal journals

    Private to the author.

  • Group conversations are different

    A group is a room with a roster and an administrator can read it. We say so plainly rather than letting people assume otherwise.

Access control

  • Granular permissions

    Not two tiers. A volunteer can be given exactly one capability.

  • An approval queue

    Nobody joins your church and sees data before an administrator approves them.

  • Two-factor authentication

    Available for the accounts that need it, with recovery codes.

  • Withdrawable access

    Access can be removed without deleting a person from your records.

Files and media

Uploaded media lives in a private store and is served through short-lived signed links rather than public URLs, so a file is not readable by anybody who happens to guess an address.

Payments

Card details never reach our application. Both Stripe and PayPal are used through hosted checkout, and a gift is only ever marked paid by a verified webhook.

Frequently asked questions

Are you SOC 2 or HIPAA certified?
No, and we will not imply otherwise. If a certification is a requirement for your church, we are not the right choice today.
Where is our data hosted?
On managed infrastructure in the United States. Ask us for the specifics and we will tell you.

Keep reading

Set your church up on Church By Faith

Create your church, invite your leaders and turn on only the tools you use. Nothing you do not need appears in anyone’s navigation.

Start your church