Data, Privacy and Security

GivingIQ utilizes Amazon Web Services (AWS) in order to take advantage of the scalability, reliability, and security of the AWS Infrastructure as a cloud service.

All data is stored and processed through AWS's certified-secure facilities:

• AWS is the proven leader for security and compliance in financial industry applications. learn more
• GivingIQ utilizes best in class Identity and Access Management (IAM), Resource access management, and network topology.

• AWS supports 143 security standards and compliance certifications, including PCI-DSS, HIPAA/HITECH, FedRAMP, GDPR, FIPS 140-3, and NIST 800-171.
• Performance and availability metric monitoring tools alert on-call teams for quick detection and triage of application issues.
• Internet-facing services and operating system packages are continuously assessed for security vulnerabilities through internal mechanisms and regular third party audits.
• GivingIQ leverages Cloudflare CDN to mitigate DDoS attacks and filter malicious traffic.

• GivingIQ enforces in-transit encryption for all data on untrusted networks and supports TLS 1.3 for all inbound client communication.
• A web application firewall is implemented to detect and block unwanted reconnaissance and malicious application-layer attacks.
• Sensitive data and electronic files are encrypted at rest.
• GivingIQ monitors and responds to application security events.
• Passwords are stored using a secure hashing algorithm with an industry standard work-factor.
• Web application security is tested using periodic automated vulnerability scanning.

• All GivingIQ employees are bound by confidentiality agreements and stringent policies regarding data handling.
• All GivingIQ employees receive regular training on security best practices and compliance with privacy regulations.

• Disaster recovery processes are tested on a quarterly basis using automation for data recovery and application restoration.
• GivingIQ maintains a security breach response plan to respond to data breaches promptly and effectively.

• GivingIQ workstations enforce full-disk encryption and lock sessions based on an inactivity timeout.
• All workstations have modern anti-malware software installed.
• Operating system and software security updates are applied at regular intervals.
• Web browsing activity is monitored and access to malicious websites is automatically blocked.

• GivingIQ retains external counsel to advise on data privacy & security regulations, as well as compliance best practices.
• GivingIQ does not sell, rent, or lease personal or business details to any third-party. Data sharing with nonprofits and partners complies with our publicly posted Terms of Use.
• We also comply with other key data privacy requirements stipulated by the California Consumer Privacy Act (CCPA) and General Data protection Regulation (GDPR). See our publicly posted Privacy Policy Privacy Policy for more.