Security & Trust
Your church’s data is protected by enterprise-grade security practices and a commitment to transparency. We take your trust seriously.
Per-church data isolation
Each church operates in its own dedicated database environment, ensuring complete separation and privacy of data across all tenants.
Encryption in transit & at rest
All data is encrypted using industry-standard protocols both while being transmitted and when stored on our servers.
Role-based access control
Granular permissions ensure that every team member only accesses the features and data necessary for their role.
Automated backups
Continuous, automated backups with point-in-time recovery ensure your church data is always safe and restorable.
DDoS protection & WAF
Enterprise-grade DDoS mitigation and Web Application Firewall keep your church's online presence available and secure.
Regular security updates
Dependencies and infrastructure are continuously patched and updated to protect against emerging vulnerabilities.
GDPR-friendly data handling
We follow privacy-by-design principles, giving churches full control over data retention, deletion, and portability.
Audit logging
Comprehensive, tamper-proof audit trails record all administrative actions for accountability and compliance reviews.
Compliance & standards
Our infrastructure meets and exceeds industry benchmarks.
Responsible disclosure
We welcome security researchers and church administrators to responsibly disclose any potential vulnerabilities. We are committed to addressing security concerns promptly and transparently.
security@churchnepal.com