Security

Tenant isolation

Every church's data is segregated by row-level security policies enforced at the database layer. A request authenticated as one church can never read or write data belonging to another church, even in the event of an application bug.

Encryption

All traffic is encrypted in transit with TLS 1.2+. Data at rest — including database contents, file uploads, and backups — is encrypted using AES-256 managed by our cloud provider.

Authentication

Sign-in is handled by Supabase Auth with hashed passwords and optional magic-link login. Admins can revoke any user's access immediately from the admin area.

Access controls

Within a church, role-based permissions separate super admins, church admins, and family members. Audit logs record sensitive actions like role changes and branding updates.

Reporting a vulnerability

Found something? Please email security@justachurchdirectory.com with details. We respond within two business days.