Compliance and security

Compliance,

delivered done.

Church leaders do not lose sleep over scheduling. They lose it over the GDPR, over a letter from a supervisory authority, over a member asking what you hold about them. Qeewee does not hand you a manual: it delivers the documents, under the law of the country you chose.

Four documents

Delivered with your space,

not left to you.

Article 30

Record of processing activities

Sixteen activities described from the moment your space is created: members, scheduling, giving, communications, accounts and access, photos, rooms, events, children check-in, documents, messaging, newcomer follow-up, forms, announcements, small groups. In your language, under your country's legal framework.

Article 33

Breach register

Record the incident, its scope, the people affected, the steps taken. The register exports to PDF, because this document is handed to the authority, and it is not something you draft inside a seventy-two hour deadline.

Published

Generated with your real contact details and your organisation's country, published at a stable address, in seven languages. A published policy with gaps is more treacherous than a missing page.

Included

Data processing agreement

The agreement names the sub-processors: OVH SAS for hosting, Stripe Payments Europe and Payrexx AG for payments, Sinch for email, Microsoft Ireland for sign-in. None is hidden behind an "and others".

Your data

Where it lives,

and with whom.

Hosted in the European Union, with OVH. No transfer to a third country is needed to run the application.
Isolated per organisation. Every record carries its network identifier, and the separation is enforced on reads and writes alike, not only on screen.
Exportable at any time, person by person or in full. What erasure destroys, the export showed: both read the same list.
Erasure also revokes the public links a person had been given. Deleting a record while leaving its tokens alive would be shutting the door and leaving the key in the lock.
Consent is enforceable. A proven withdrawal removes the person from bulk mailings and notifications, inside the sending service itself, not merely on a screen.

Access

Sign in,

and stay in control.

Sign in with Google, Microsoft or Apple, or with a password: each person chooses.
Passkeys and biometrics on mobile, and two-factor authentication for those who prefer it.
Your connected devices are listed, with a button to sign out all the others. A lost phone can be shut out from any browser.
Unlinking an account really closes it. An unlinked external sign-in is refused afterwards, even when the address matches: otherwise "unlink" would be nothing but a label.
Permissions per module. A team member only sees what their role requires, and the restriction holds across three layers, closed by default.

Qee

wee

.