Is our data safe, and where is it stored?

Where it is. The application, database and files are on a server in Poland, in the European Union. Backups are stored in the EU as well. The few outside services we use are named on the subprocessors list.

Who can see it. Each church's data is separated inside the database itself, so one church can't see another's. Within a church, access depends on the roles your administrator assigns. An audit log records important changes.

Protection. All connections are encrypted. We store passwords only in a form that can't be read back. You can turn on two-step verification, and roles with access to sensitive data must use it.

Backups. Every night we make an encrypted copy of the whole database and all files. We keep copies from the last 7 days, 4 weeks and 6 months. After a serious failure, you'd lose at most the last day's changes, and we'd have the service running again within 4 hours.

Responsibility. Your church is the controller of its people's data, and we process it on the church's behalf under the Data Processing Agreement.

The details are on the Security page. The status page shows whether everything works and when the latest backup was made. For your church's settings, see Security and privacy.