Schema-per-tenant isolation
Each church’s operational data lives in its own tenant schema. Access is scoped by church context — not a shared flat table of everyone else’s members.
Trust & Safety Center
Built for your church’s most sacred trust.
Parents hand you their children. Members hand you their stories. Here is exactly — in plain language — how Addeum guards both.
Child safety
You configure drop-off and pickup policies; Addeum can enforce ratio gates, guardian-matched pickup codes, and background-check expiry on volunteer schedules when those features are enabled. Software supports — never replaces — trained supervision, screening providers, or your legal duties.
Guardrailed AI
AdDeumAI redacts personal details on our self-hosted path, cites its sources on scripture-related answers, and routes crisis signals to the staff channels you configure.
Data protection
Your congregation’s data belongs to your congregation. We hold it carefully — schema-per-tenant isolation, purpose-based access, and audit trails.
Security specifics
Concrete claims for boards and IT leads, grounded in product architecture (tenant schema isolation, UnifiedAuditService, AiPiiRedactor, export pipelines). We do not claim SOC 2 / ISO certification on this page. Ask for a questionnaire and a signable DPA during procurement.
Encryption in transit and at rest
TLS protects data in transit. Data at rest is encrypted using the hosting platform’s managed storage encryption.
AI PII redaction
AdDeumAI redacts personal details on our self-hosted path before outbound model calls. Logs and audit trails stay redacted; only the user-facing reply is restored where appropriate.
RBAC and audit trail
Role-based permissions and campus-aware access control what staff can see and change. Sensitive actions write to an audit trail with correlation IDs.
Export, delete, and DSAR posture
Churches remain data controllers for their congregation. Tools support export and deletion workflows so you can honor member requests under GDPR and similar regimes.
Hosting and backups
Production runs on managed cloud infrastructure with routine backups. Exact provider and RPO/RTO details are shared during security reviews for churches that need them.