Your data is your data. It is protected with the upmost care.
You can sleep well knowing that your data is safe.
Church Directory has been built with this in mind from day one.
Outlined below are just some of the ways that your data is protected.
Hosting infrastructure runs primarily on Linode as our primary hosting provider, and Digital Ocean as our off-site backup.
Extensive logs and metrics is kept on activity that happens on Church Directory servers.
Servers are only accessible via an SSH connection. SFTP and other access is disabled.
Two-factor authentication is enabled for all third party services related to Church Directory.
Church Directory is a SaaS application built on an industry leading web framework: Laravel.
The framework and application dependencies are continually kept up to date.
All database calls are sanitized before execution.
CSRF tokens are utilized to prevent cross site request forgeries.
All application errors and warnings are logged into a bug tracker for detailed analysis.
All Church Directory web and mobile apps transmit data over encrypted, TLS-enabled connections (HTTPS).
Passwords are stored using the one-way, bcrypt
hashing method. Passwords can never be seen or retrieved, even if you wanted to.
Specific information identified as sensitive in our database is encrypted at rest.
We employ several methods for data backup to make sure your data is never lost and our backups are never old.
The Church Directory database employs encrypted, streaming replication to a secondary off-site location.
The primary database takes daily, weekly and monthly backups.
The secondary database takes daily, weekly and monthly backups, and stores these remotely at an off-site location.
Backup and replication processes are automatically and continually monitored. Priority alerts are triggered if replication or backups fail.
© 2024 Church Work LLC
church-directory - 0.026s