Security

Data Processing & Security

Mutual Covenant is a service and brand operated by Computer Pro Network LLC.

Mutual Covenant, operated by Computer Pro Network LLC, provides church management software and related services. Computer Pro Network LLC processes church data only to operate Mutual Covenant.

Role of Computer Pro Network LLC

Computer Pro Network LLC is the legal operator of Mutual Covenant. Churches remain responsible for the ministry data they enter. Computer Pro Network LLC processes that data as needed to host the application, authenticate users, send transactional email, store files they upload, and provide support.

Isolation

Every tenant table is scoped by church. Super Admin accounts live in a separate store and never appear in church user lists. Application queries do not accept church identity from the browser.

Access control

Passwords are stored with modern one-way hashing. Sessions use HTTP-only cookies. Role-based permissions control who can view giving, pastoral notes, and other sensitive modules. Member portal users cannot access church administration.

Files and backups

Uploaded documents are stored outside the public web root, organized by church, and downloaded only after authentication. Application configuration and credentials are kept outside the document root.

Online Giving payments

Online Giving uses Stripe Connect. Each church has its own Stripe connected account; donations are charged directly on that account and paid out by Stripe to the church’s bank account. Card and bank details are collected inside Stripe’s hosted payment form and never pass through Mutual Covenant servers. Stripe API secrets and webhook signing secrets are stored encrypted outside the web root, webhook events are verified with Stripe signatures before any record is updated, and every event is matched to a church through the stored connected-account mapping, never through data supplied by the browser.

QuickBooks Online connections

Churches connect QuickBooks Online through Intuit’s OAuth 2.0 authorization; passwords are never collected. The authorization request uses a single-use state value bound to the church and user, and only the accounting scope is requested. Access and refresh tokens are encrypted at rest with authenticated encryption bound to the church and QuickBooks company, are never shown in the browser or written to logs, and are refreshed one at a time per connection. Each QuickBooks company can be connected to only one church, every record is scoped to its church, and dedicated permissions control who may connect, change mappings, approve transfers, and retry. Connection changes, mapping changes, approvals, transfers, and corrections are recorded in the audit log. All traffic to Intuit uses TLS with certificate verification.

Subprocessors

Computer Pro Network LLC uses hosting and email providers, Square (for Mutual Covenant subscription billing), Stripe (for church Online Giving), and Intuit (when a church connects QuickBooks Online) to deliver Mutual Covenant. Those providers process information only as needed to provide their service.

Questions

Security inquiries: [email protected]. See also the Privacy Policy.