Security

Your data is your data. It is protected with the upmost care.


You can sleep well knowing that your data is safe. Church Directory has been built with this in mind from day one.
Outlined below are just some of the ways that your data is protected.

  Servers & Hosting

How we host our technology

  • Hosting infrastructure runs primarily on Linode as our primary hosting provider, and Digital Ocean as our off-site backup.

  • Extensive logs and metrics are kept regarding activity that happens on Church Directory servers.

  • Servers are only accessible via an SSH connection. SFTP and other access is disabled.

  • Two-factor authentication is enabled for all third party services related to Church Directory.

  Church Directory Application

What powers Church Directory

  • Church Directory is a SaaS application built on an industry leading web framework: Laravel.

  • The framework and application dependencies are continually kept up to date.

  • All database calls are sanitized before execution.

  • CSRF tokens are utilized to prevent cross site request forgeries.

  • All application errors and warnings are logged into a bug tracker for detailed analysis.

  Encryption

How data is secured

  • All Church Directory web and mobile apps transmit data over encrypted, TLS-enabled connections (HTTPS).

  • Passwords are stored using the one-way, bcrypt hashing method. Passwords can never be seen or retrieved, even if you wanted to.

  • Specific information identified as sensitive in our database is encrypted at rest.

  Backups

We employ several methods for data backup to make sure your data is never lost and our backups are never old.

How data is stored

  • The Church Directory database employs encrypted, streaming replication to a secondary off-site location.

  • The primary database takes daily, weekly and monthly backups.

  • The secondary database takes daily, weekly and monthly backups, and stores these remotely at an off-site location.

  • Backup and replication processes are automatically and continually monitored. Priority alerts are triggered if replication or backups fail.

Want more details? We'd love to chat! Reach out for more information.

© 2024 Church Work LLC

church-directory - 0.029s