Trust and security
The most secure choice you can make
Compliance
Security
Privacy
Vetting & validation
Compliance
SOC 2 and SOC 1 Reports
These SOC reports provide assurance to our clients that our control descriptions are accurate, suitably designed and operating effectively. Benevity currently issues SOC 1 Type II and SOC 2 Type II reports.
CSA STAR Level 1
The CSA’s Security, Trust, Assurance and Risk Registry (CSA STAR) helps organizations assess cloud service providers.
PCI Data Security Standard
Benevity does not collect, store or process any cardholder data. Cardholder data is collected directly by our PCI DSS certified partners who specialize in payment processing services. To ensure we meet our obligations, Benevity completes an annual PCI SAQ-A for payment processing security.
Certified B Corporation
Unlike traditional corporations, Certified B Corporations are legally required to consider the impact of their decisions on their employees, suppliers, community, consumers and environment. For more information, click here.
Our security commitment
We ensure that your data is secure across all Benevity products and services.
Our product
Our security-by-design approach to product development means we build through the lens of security. We integrate with your identity providers for SSO to make your giving experience simple and seamless.
Our people
Security and privacy is embedded into our culture. Our people take regular training to protect themselves, our clients and our business and are made aware of the latest security risks and threats.
Our partners
Threats to cybersecurity are always evolving. Our security teams work with globally recognized partners to ensure our platform adopts the latest protections and is continuously scanned for threats and vulnerabilities.
Our privacy commitment
We ensure that every user’s privacy rights are respected, wherever they are in the world.
Global regulations
With a global client base, Benevity’s privacy program is designed to meet the world’s strictest regulatory requirements. The EU’s General Data Protection Regulation (GDPR) is considered the world’s leading regulatory framework, setting the standard for all other jurisdictions. Benevity regularly monitors and updates our privacy program to ensure alignment with the changing regulatory landscape, recent EU decisions such as the invalidation of the EU-U.S. Privacy Shield and the U.K.’s exit from the EU.
Global safeguards
Recent EU decisions like Schrems II have highlighted the necessity of employing additional safeguards to secure data during cross-border transfers. Benevity uses industry-leading encryption methods to protect data both in transit and at rest.
Benevity’s commitments are detailed below.
- Our Privacy Notice outlines our commitment to our user’s data privacy rights.
- Our Data Processing Addendum defines our standard commitments to our clients and includes the EU’s Standard Contractual Clauses and our up-to-date list of sub-processors.
Our reliability commitment
To ensure our products are highly available and scalable, we partner with the world leader in cloud infrastructure hosting, AWS.
Availability
The call for Goodness can come at any time, and your program should be ready to respond — 99.5% uptime is our promise to you.
Rapid scalability
Developed using AWS’s Elastic Cloud Computing, our products scale rapidly when demand increases and certain thresholds are hit.
Resiliency, continuity and recovery
When the unexpected happens, we’re ready. We have the people in place and the alternate infrastructure on standby.
Our global vetting commitment
We ensure that every nonprofit on our platform is legitimate and in good standing.
Global reach
Maintaining the largest database of nonprofits in the world (over two million!) means that we employ highly sophisticated vetting processes so you can give with confidence.
Vetting and validation partners
Our partnerships with TechSoup and Moody's help us to monitor nonprofit legitimacy and ensure they meet their local jurisdiction’s regulatory requirements.
All nonprofits are vetted before onboarding and periodically reviewed to determine they are operating in accordance with Benevity's Terms of Use and Platform Eligibility Guidelines.
Transaction monitoring
Benevity has dedicated teams monitoring for fraud, with automated detection and prevention measures in place to ensure the integrity of your giving program.
Learn more about our security and vetting processes and our commitment to nonprofit organizations here.
Trust and security FAQs
Still have questions?
Commit to meaningful
change today
