Security & Trust
Ministry information deserves thoughtful protection.
Juntos is designed around church boundaries, ministry responsibility, appropriate access, and intentional stewardship of sensitive information.
Access should follow responsibility, not simply software access.
ACCESS BY CHURCH
Church information stays connected to its church.
CHURCH CONTEXT
People, families and records always belong to one church.
Checked every week
Checked every time
Every request is checked for the right church and the right role before anything is shown.
A sign-in is not a key to everything.
Signing in is only the first step. You also need a role at your church before you can see anything.
IDENTITY
Everyone signs in with their own account.
ROLES & RESPONSIBILITY
Signing in is only the first step. You also need a role at your church before you can see anything.
SENSITIVE CARE
The most sensitive care needs can be limited to named people.
Not every ministry need should be visible to everyone.
Congregational Care, prayer requests, children’s information, and family situations can include private details. Juntos helps the right people see what they need.
For example: care needs, prayer requests, children and their guardians, families, and serving assignments.
Important ministry activity leaves a history.
Juntos records important actions, so leaders can see what happened and who did it.
Activity history can include care need creation and updates, assignments and status changes, child check-in and checkout, selected administrative actions, and retention-related activity.
Sensitive records should not simply live forever.
Juntos keeps care records for a set time, then removes the details that identify people.
Each kind of record has its own rule for how long it is kept.
Family ministry deserves extra care.
El Nido is designed to keep children, guardians, check-in activity, and important care information where only the right people can see it.
GUARDIAN CONTEXT
Children remain connected to the family and guardian information ministry teams need.
CONTROLLED PHOTO ACCESS
Child photos are shown only through private links that expire.
CHECK-IN HISTORY
Check-in and checkout activity can be retained as part of the ministry record.
When Juntos connects to another system, credentials deserve protection too.
When your church connects another system, the connection keys are stored encrypted.
They are never sent to anyone’s browser.
Share what ministry requires, not everything available.
Juntos is designed around the principle that ministry teams should receive the information needed for their responsibility without unnecessarily exposing more sensitive context.
This can include limiting free-text care details in notifications, showing each person only what their role allows, and keeping protected information behind authenticated application access.
Trust is an ongoing responsibility.
Security is not treated as a one-time checkbox. Juntos continues to evaluate access controls, dependencies, sensitive-data handling, and the operational practices required to support churches responsibly.
We automatically scan our code, and the tools it uses, for known security problems.
What Juntos does today
Each church’s information is kept apart from every other church’s, checked by automated tests.
Access by role, with “Pastoral Only” and restricted care for the most sensitive needs.
Sensitive actions are recorded, so there is a history of who did what.
Care records follow a set retention schedule and are then anonymized.
Passwords are checked against known leaked passwords.
Connections to your church’s other systems are stored encrypted.
Hosted on Vercel and Supabase.
Juntos records selected sensitive actions, not every click.
Juntos is not a medical, counseling, or clinical-record system.
Have a security or privacy question about Juntos?
We’re happy to talk through how Juntos approaches ministry access, sensitive information, family data, and record stewardship.