Keeping your records safe
Your donors trust you with their money, and you trust us with your records. This is what we do about that.
What is in place
- Your records are yours alone.Many organisations use the service, but the database itself refuses to show one organisation's records to another. That is enforced at the lowest level, not only in the screens.
- People see only what they should.Roles decide who can view, enter, approve and post. The person who asks for a payment cannot be the one who approves it.
- Every change is recorded.Entries are corrected by reversing them, never by editing or deleting. A tamper-evident trail shows who did what and when, including when a closed month was reopened.
- Everyone signs in in two steps.A password is not enough. Signing in also needs a code from an authenticator app on the person's phone.
- Sensitive details are encrypted.Employees' tax PINs are stored encrypted, and a change to a supplier's bank details has to be checked before the supplier can be paid.
- You can take your data with you.You accept a data processing agreement when you sign up. You can export your records, and if an organisation leaves its data is deleted after a notice period.
Questions about your data?
Ask us how records are kept, who can see them and what happens if you leave.