Question

Photo of Thomie Jose San Agustin

0

May I know if data stored are all encrypted? And what data are being sent back for analytics?

Hi,

I am currently looking for a solution for handling our Church Members. I would like to ask if the data that is stored by RockRMS are being encrypted? Inline with these what data are being sent back to the main develoer for analytics(if any)?

 

God Bless!

Thanks,
Thomie

Security
  • Photo of Jon Edmiston

    0

    By default only a couple of fields are encrypted in the database (passwords, check MICR info, etc.)  In SQL Server you can setup the entire database using Transparent Data Encryption (http://sqlmag.com/database-security/using-transparent-data-encryption).

  • Photo of Thomie Jose San Agustin

    0

    Hi Jon,

    That sound great. Would you mind if there is away to also encrypt the first name, last name of a person? I look unto the system but I can't find how.

     

    God Bless!

    Thanks,

    Thomie
     

  • Photo of Jim Michael

    0

    Thomie-

    The only way to encrypt fields beyond the few that Jon mentions would be to encrypt the entire database (see the link Jon posted) which is perfectly doable, but up to you, the administrator of your own instance of Rock, and not of Rock itself. Similarly, you will want to encrypt the data link between Rock and end user browsers by enabling SSL/TLS and installing a certificate on your IIS instance running Rock... again, something that's left up to the system admin in most cases but is pretty straightforward to implement.