Security

Your data is your data, and we treat it that way.

Lightpost has been built with security in mind from day one. Below are just some of the ways your data is protected: at rest, in transit, and behind the scenes.

Ask us anything Service status

At a glance

TLS everywhere All traffic encrypted
Bcrypt passwords Never stored in clear
Off-site backups Daily, weekly and monthly
No data resale Ever. Not for ads, not for anyone

Servers & hosting

Where and how we host.

Lightpost runs on dedicated, private infrastructure, not shared hosting or multi-tenant abstractions.

Trusted providers: Primary infrastructure is on Latitude and Hetzner, with off-site replicas on Digital Ocean.
Logs and metrics: Extensive logs and metrics are continually captured for all server activity.
Private access only: Servers are only reachable via SSH over private networks, not the public Internet. SFTP and all other remote access methods are strictly disabled.
Two-factor everywhere: Two-factor authentication is required on every third-party service related to Lightpost.
Automatic updates: OS, kernel, and software package security updates are applied on regular automated schedules.
Constant monitoring: Uptime and performance are monitored continuously, with priority alerts for anomalies. See status.lightpost.app.

Application

What powers Lightpost.

Industry-standard frameworks, patterns, and dependency hygiene.

Built on Laravel: Web applications and services are built on Laravel, an industry-leading, security-first framework.
Official app stores: The mobile apps are built with React Native using Expo, distributed through the official Apple and Google stores.
Up-to-date dependencies: Framework and application dependencies are continually kept up to date, with security advisories monitored automatically.
SQL injection prevention: All database queries are parameterized and sanitized, preventing SQL injection.
CSRF protection: CSRF tokens protect every state-changing web request.
XSS protection: Rich HTML is sanitized, and plain text is escaped on output to prevent XSS attacks.
Error tracking: Errors and warnings stream into a dedicated bug tracker for analysis and fast fixes.
Rate limiting: Rate limiting is applied to sign-in, password reset, and other sensitive endpoints.

Encryption

How data is secured.

Encryption in transit, encryption at rest, and one-way hashing for anything we shouldn't be able to read.

Encrypted in transit: All Lightpost web and mobile traffic runs over encrypted, TLS-enabled connections (HTTPS).
Hashed passwords: Passwords are stored using the one-way bcrypt hashing algorithm. Even we can't see them.
Encrypted at rest: Sensitive fields in our database are encrypted at rest.
Revocable credentials: API tokens and OAuth credentials are revocable at any time from your account settings.
No card data on our servers: Payment card details never touch Lightpost servers. They are handled entirely by Stripe (PCI DSS Level 1).
Secrets kept separate: Secrets, credentials and keys are stored outside of application code and rotated periodically.

Backups & durability

Your data is never one click from gone.

Multiple layers of backups mean we have a way back, even in worst-case scenarios.

Streaming replication: The primary database uses encrypted streaming replication to a secondary off-site location.
Scheduled backups: Daily, weekly, and monthly off-site backups are taken automatically and encrypted.
Monitored around the clock: Replication and backup processes are continuously monitored. Priority alerts fire on any failure.
Redundant file storage: Uploaded files (photos, attachments, media) are stored on redundant object storage with off-site replication.

Daily Encrypted, off-site

Weekly Encrypted, off-site

Monthly Encrypted, off-site

Access & permissions

Only the right people see the right things.

Access is scoped at every level: user, role, and congregation.

Scoped to your congregation: Every query is scoped to your congregation. Data never leaks across accounts.
Role-based permissions: Role-based permissions control what members and leaders can see and do.
Checked on every request: Authorization is checked on every web request and API endpoint.
Member-controlled details: Members can control the visibility of their own profile details (phone, address, email).
Session control: Sessions expire, and can be revoked from any device at any time.
Audit logs: Full audit logs capture sensitive admin actions for later review.

Privacy & your data

Your data, secured.

We earn your trust, we don't assume it. Here's what that means in practice.

Never sold: We never sell, rent, or share your data. Not for ads, not to anyone.
Never mined: We don't mine your data to train AI models or anything else.
Export any time: You can export your directory data at any time.
Deletion on request: Account deletion is available on request, and your data is fully removed.

Responsible disclosure

Found a security issue?

If you believe you've found a vulnerability in Lightpost, please reach out with responsible disclosure. We take every report seriously and will respond promptly.

Report a vulnerability

Questions

Want more details?

We're happy to go as deep as you'd like: architecture, threat model, data flow, incident response. Just ask.

Service status Reach out