ChurchOS: A Multi-Tenant, Mobile-Money-Native Software-as-a-Service Platform for Church Governance, Financial Reconciliation, and Member Administration in East Africa

ChurchOS is a multi-tenant, mobile-money-native SaaS platform for church membership, attendance, financial reconciliation, and event management in Kenya and East Africa. It enforces tenant isolation via a church_id filter at the ORM layer and integrates the M-Pesa Daraja STK Push API as a first-class payment mechanism. The backend is Flask 3.0 across seven Blueprints, backed by PostgreSQL on Neon and deployed on Render; the frontend is an installable React 18 PWA on Vercel. Authentication uses JWT with rotating, server-revocable refresh tokens. A five-role RBAC hierarchy models the ordination structures common to Pentecostal and evangelical denominations, a governance pattern absent from mainstream alternatives such as Planning Center and Breeze ChMS. This note documents the system's architecture, data model, security design, and financial reconciliation mechanism, and situates it against the literature on multi-tenant SaaS design and East African mobile money adoption. Live API: churchos-yitr.onrender.com. Live application: churchos-app.vercel.app. Repository: jameskoero/ChurchOS.