Skip to content

Your records, sealed inside your own walls.

Every parish's data lives in its own encrypted database, walled off so a query can never wander into another. The most sensitive pastoral notes are sealed to the priest alone, your money can't be redirected, and none of it is ever ours to keep. This is the quiet foundation beneath everything else.

A parish keeps the most sensitive records there are.

A confession heard in trust. A family's crisis, written down so the next priest will know. Giving that must never become gossip. These are not customer records, they are souls, and they deserve better than a spreadsheet on a shared drive or a login the whole office knows. Symphonia treats the parish's secrets as sacred, because they are.

Every change, on the honest record.

A tamper-evident log of who did what, hash-verified and impossible to quietly alter, so trust is never a matter of taking someone's word.

lock lock_person notifications
A
Settings.
groups Roles 13
check_circle Permissions
history_edu Activity
lock_person Team & access
https Privacy
download Data & backups
Beta 0.8.1
groups People church Parish forum Office account_balance Finances self_improvement Priest's Corner Settings
searchnotifications_noneforum
history_eduActivity
Activity.
Export log
142
Events · 30d
0
Failed sign-ins
13
Active roles
httpsHash chain verified · every row intact
ActorAreaWhenStatus
Fr. John Doeopened a sealed pastoral note Pastoral 2h ago Sealed
Jane Roeexported the year-end statements Finances Yesterday Verified
James Poegranted the catechist role Roles 2 days ago Verified
Dcn. Peter Doeedited a member record People 3 days ago Verified
lockAudit rows are immutable — read, never edited or deletedNothing altered.
Parish Studio, on your desk
9:41Parish Studio
lock
Settings
Trust.
menu
Trust posture · all clear
churchIsolated per parishcheck_circle
httpsEncrypted at restcheck_circle
lockRow-level securitycheck_circle
lock_personNotes sealed to the priestcheck_circle
downloadNightly off-site backupscheck_circle
groupsPeople churchPastoral forumComms volunteer_activismGiving
The same Studio, in your pocket

Trust, built in layers.

Your records, walled off
dns
A private database per parish
Your parish lives in its own encrypted database, never a shared pool. One parish can never see another.
https
Encrypted down to the field
Sensitive data is encrypted at rest with a managed key held outside the database, so a stolen backup reads as nothing.
fact_check
Row-level security, enforced
The database itself checks who may read each row, on every read and write, not just the app.
cloud_download
Continuous off-site backups
Encrypted backups run nightly to a separate location, so a bad day is never a lost parish.
Only the right eyes
lock_person
Notes sealed to the priest
Legacy Notes and the confession queue are sealed to the rector alone. Not staff, not an interim, not even us.
lock
Sign in with your face
Email and password, an emailed code for a second factor, and optional Face ID or Touch ID.
groups
Custom roles on every action
Thirteen preset roles and your own custom ones, with the irreversible actions reserved for the rector.
payments
Your money can't be redirected
Gifts route only to your own account, no role can quietly escalate, and payment secrets are encrypted.

The honest answers.

check_circle
Where does our parish data live?

In its own encrypted database, not a shared table with other parishes. Sensitive fields are encrypted at rest with a key held outside the database, and the database enforces who may read each row.

check_circle
Can our staff read a confession or a sealed note?

No. The confession queue and Legacy Notes are sealed to the rector alone and encrypted at rest. Not staff, not an interim priest, not a database dump, and not Ancient Designs support can read them.

check_circle
How do we sign in securely?

Email and password with an emailed second-factor code, plus optional Face ID or Touch ID. The truly irreversible actions stay reserved for the rector, even for a trusted deacon.

check_circle
What if we ever want to leave?

Export everything, any time. There is no lock-in and no holding your parish hostage. Your records are yours, and a tamper-evident audit log means there is always an honest history of every change.

Trust worthy of what a parish holds.

See exactly how Symphonia guards your parish's most sensitive records, in a short walkthrough.