Security and data
Plain answers about where your members' data lives and what we can and cannot do with it.
Where your data lives
Everything FedCrest builds runs in a cloud account that belongs to you, in a region you choose. You hold the administrator access from day one. We do not run your members' data in a system of our own.
What we can access
We work in your account through access you grant and can revoke at any time. We keep no copy of your data beyond what a support request needs while it is open. If you end the engagement, you keep the system, the data and the documentation.
Sign-in
Members and administrators sign in through the identity controls of your own account. You can require multi-factor sign-in for administrators.
Backups, updates and monitoring
The monthly retainer includes updates, backups and monitoring of what we built, with support by email.
Roles under GDPR
You are the controller of your members' data. FedCrest acts as your processor under a data processing agreement, which we provide before work starts. You decide what data is collected and why.
Children and guardians
Registration can require guardian consent for minors and records it. You decide what is asked and how long data is kept. Check the age of digital consent that applies in your country with your own adviser.
If something goes wrong
If we find a problem that affects your data, we tell you without undue delay and help you assess and report it. To report a vulnerability or a concern, write to hello@fedcrest.com.
What we do not claim
- We hold no security certifications, such as ISO 27001 or SOC 2, and have had no independent audit.
- We are a one-person studio, with no 24/7 support line. Support is by email, within two working days.
- The security of the underlying cloud account is shared with your cloud provider. We configure it carefully, and you remain responsible for who you give access to.
This website
This site sets no tracking or advertising cookies. It stores a technical copy of its pages in your browser so it works offline. See the legal notice and privacy policy.
Last updated: October 2026.