Tenant-scoped records
Workspace queries and persisted records include the church tenant so one organization cannot intentionally access another church's operational data.
Security and privacy
Responsible safeguards for church, member, prayer, and donor data
MinistryHarbor combines technical controls with ministry policies that limit access, require approval, and discourage unnecessary collection.
Role-based permissions
Owner, administrator, finance, staff, writer, and viewer roles separate operational work from sensitive donor and platform administration access.
Human approval
External campaign, social, and WhatsApp workflows require an authorized person to approve content before sending or publishing.
Audit and consent records
Sensitive actions, approval decisions, authentication events, and channel-specific communication consent are recorded for review.
Shared responsibility
Church administrators remain responsible for lawful collection, accurate permissions, least-privilege roles, MFA use, retention requirements, and prompt removal of former staff access. Review the Privacy Policy and Terms of Service for additional details.