Your church's data stays your church's data
ChurchFlex is multi-tenant by design. Every record belongs to a church, and access is scoped to the role a person actually holds.
How access is controlled
Tenant isolation
Records are partitioned by church so no query can cross into another congregation's data.
Role-based access
Owner, super admin, department lead, media team and volunteer each see only what they need.
Least privilege by default
New people start as volunteers; elevated access is granted deliberately.
Verification page
Admins can review isolation and permission checks rather than take our word for it.
Invite-based joining
People enter through a church-issued code or link, never an open signup.
Minor-safety guardrails
Background-check status gates assignment to kids and student positions.
Volunteer privacy
Volunteers see their own schedule, their own contact details and the teammates they serve alongside — not the full church roster. Phone numbers are used for serving reminders and church announcements only, and anyone can opt out of texts at any time by replying STOP.