A multi-tenant platform built from the ground up for church data privacy, strict permission control and reliable performance, whatever the size of your church.
Every query, API call and cache key is scoped to a single church, and every request is checked against the caller’s membership of the church it names.
Four church roles, seven functional roles (finance, pastoral, safeguarding and more), plus scoped roles per cluster and department. Guards stack, so each request is checked at several levels.
HTTPS on all traffic. Sensitive fields encrypted with AES-256-GCM. Short-lived access tokens with rotated refresh tokens. Rate limiting backed by Redis.
PostgreSQL 16 on RDS, Redis on ElastiCache, containers on ECS Fargate, media on S3, email via SES. Core data is hosted in the EU (Stockholm); every outside service is named in our DPA.
Every multi-tenant query path has a composite index that starts with the church, so lists stay quick as a church grows to thousands of members.
Email, SMS, push and automated journeys run through BullMQ queues with exponential backoff, dead-letter logging and health monitoring. Nothing blocks your request.
The top level. Admin and management roles control church-wide settings, branding, billing and global events.
Ministries, campuses or age groups. Each cluster has its own lead, sub-leads, workers and members, with scoped permissions.
Teams within clusters: worship, tech, children’s ministry. Each with its own rotas, events, meetings and chat.
Built with React Native and Expo, so members get a fast, smooth app with dark mode, push notifications and caching that keeps working on a weak signal.
Set up your church in minutes. Free plan, no card, no sales call required.