Your records, kept with care.
Every record is scoped to its parish and checked on every request, with the database itself enforcing the line for the most sensitive tables. Pastoral notes open only for the priest, your money can't be redirected, and none of it is ever ours to keep. This is the quiet foundation beneath everything else.
A parish keeps the most sensitive records there are.
A confession heard in trust. A family's crisis, written down so the next priest will know. Giving that must never become gossip. These are not customer records, they are souls, and they deserve better than a spreadsheet on a shared drive or a login the whole office knows. Symphonia treats the parish's secrets as sacred, because they are.
Every change, on the honest record.
A tamper-evident log of who did what, hash-verified and impossible to quietly alter, so trust is never a matter of taking someone's word.
Trust, built in layers.
The honest answers.
On a server in Los Angeles, California, with encrypted backups kept off that server. Parishes share one database, every record is scoped to its parish, sensitive fields are encrypted with your parish’s own key, and the database itself enforces the parish line for the most sensitive tables.
No. The confession log and Legacy Notes open only for the rector, and their notes are encrypted at rest. Parish staff and interim clergy cannot open them, and our support sessions never show them. Ancient Designs runs the system and holds its keys, so this rests on access rules and audit logs as well as encryption.
Email and password with an emailed second-factor code, plus optional Face ID or Touch ID. The truly irreversible actions stay reserved for the rector, even for a trusted deacon.
The rector, in Role setup. Each role has switches in plain words, such as See ParishBooks, See gift amounts, Approve payments, Read pastoral notes, and Run the Welcome desk. Each change shows the parish default beside it, one click restores the defaults, and the check is made on the server, not only in the menu.
Export everything, any time. There is no lock-in and no holding your parish hostage. Your records are yours, and a tamper-evident audit log means there is always an honest history of every change.
Trust worthy of what a parish holds.
See exactly how Symphonia guards your parish's most sensitive records, in a short walkthrough.