Is Rebel Idealist LLC penetration tested?

Rebel Idealist LLC hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Can I get Rebel Idealist LLC's SOC 2 report?

Rebel Idealist LLC's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Is Rebel Idealist LLC secure?

Security isn't a single yes/no, but Rebel Idealist LLC is SOC 2 Type II compliant and holds GDPR, PCI DSS, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Does Rebel Idealist LLC have a bug bounty or vulnerability disclosure program?

Rebel Idealist LLC hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@donorbox.org or via a /security page (Rebel Idealist LLC lists a security contact).

Who are Rebel Idealist LLC's subprocessors?

Rebel Idealist LLC lists 14 subprocessors on its trust center, including Amazon Web Services, Checkr, CrowdStrike, Jira, BambooHR. Buyers use this for fourth-party risk review.

Where does Rebel Idealist LLC host or store data?

Rebel Idealist LLC hosts on AWS. Data residency details are on its trust center.

Where is Rebel Idealist LLC's trust center or security page?

Rebel Idealist LLC's trust center is at https://trust.donorbox.org. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Is this your company? Buyers are checking Rebel Idealist LLC here. Claim donorbox.org free to control the listing, earn the badge buyers trust, and see who's evaluating you.

Claim free

Rebel Idealist LLC

donorbox.org · United States· 1–50 employees· Security contact

Security overview Compliance Penetration test

Trust level

Listed

Unverified

Listed

Domain

Report

Live

Sourced from public information. Not yet verified by the company.

Rebel Idealist LLC is SOC 2 Type II compliant. Rebel Idealist LLC also holds GDPR, and PCI DSS.

Request report access Claim this profile

Framework

Auditor

Last report

Renewal

View official trust center ↗

About

Powerful fundraising software that simplifies and maximizes the donation process? Welcome to Donorbox. Collect more donations with the world’s fastest donation forms. Effortlessly track, engage, and retain donors with industry-leading donor management. Unleash the viral power of crowdfunding and peer-to-peer fundraising. That’s just the start of what you can do with Donorbox. Because when you’re changing the world, you need a partner who’s changing what’s possible in fundraising. Learn more at [donorbox.org](http://donorbox.org/) Donorbox implements comprehensive security measures across our i

Compliance & infrastructure

GDPR PCI DSS SOC 2 Type II

Hosting

AWS

Documents

Subprocessors

A
Amazon Web Services · aws
C
Checkr · Employee management
C
CrowdStrike · Security
J
Jira · jira
B
BambooHR · bamboo_hr
C
Confluence · Document management
G
GitHub · Version control
G
Google Workspace · gsuiteadmin
H
Heroku · heroku
K
KnowBe4 · Employee management
S
Slack · Collaboration
V
Vanta

Show all 14 subprocessors

Z
Zoom · Collaboration
C
Cloudflare · Hosting and Content Delivery
US, EU

Compliance leadership

The person who leads Rebel Idealist LLC's SOC 2 isn't listed yet. Claim this profile to add it.

Penetration test

Unknown. Rebel Idealist LLC's penetration test vendor isn't listed yet.

Claim this profile to add it.

This listing is partial

7/11 details · 64%

SOC2C shows the verified essentials. 4 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.

Auditorraises trust
Add the CPA firm that issued your SOC 2 so buyers can verify who signed it.
Report dateraises trust
Add your most recent report period so buyers see how current your SOC 2 is.
Renewal date
Add your renewal window so buyers know your coverage is active.
Security controls
Confirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.

Claim free to control your listing

Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.

Frequently asked

Is Rebel Idealist LLC SOC 2 compliant?

Rebel Idealist LLC is SOC 2 Type II compliant. On SOC2C this listing is Listed.

Is Rebel Idealist LLC GDPR compliant?

According to Rebel Idealist LLC's public trust center, Rebel Idealist LLC is GDPR compliant. On SOC2C this listing is Listed.

Is Rebel Idealist LLC PCI DSS compliant?

According to Rebel Idealist LLC's public trust center, Rebel Idealist LLC is PCI DSS compliant. On SOC2C this listing is Listed.

Is Rebel Idealist LLC SOC 2 Type I or Type II?

Rebel Idealist LLC is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.

Can I use Rebel Idealist LLC's SOC 2 for a vendor risk assessment?

Yes. Rebel Idealist LLC's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.

Show 7 more questions

Answers published by Rebel Idealist LLC

Reproduced from Rebel Idealist LLC's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗

What measures does Donorbox take to ensure the security of my personal information?

Donorbox employs a comprehensive security strategy that includes encryption, network security, access controls, and regular security assessments to safeguard your personal information against unauthorized access and data breaches.

Is my payment information safe with Donorbox?

Absolutely. We use PCI-compliant payment processors to handle all financial transactions. This means that your payment details are encrypted and processed securely according to the highest industry standards.

How does Donorbox use the information I provide?

Donorbox uses your information to process donations, provide receipts, and communicate with you about your donations and our campaigns. We respect your privacy and ensure that your data is used only for the purposes you have consented to. We maintain transparency by clearly outlining our data collection and processing practices in our Privacy Policy and Terms of Service. Users are informed about the types of data collected, the purposes for processing, and their rights regarding their personal data. We also provide mechanisms for users to access, correct, or delete their data upon request, ensuring compliance with data protection laws.

Can I access or delete my information held by Donorbox?

Yes, you have the right to access, modify, and delete your personal information that we hold. You can do this by logging into your Donorbox account or contacting our support team for assistance.

Does Donorbox share my information with third parties?

We do not sell or rent your personal information to third parties. Information may be shared with trusted partners who work on behalf of or with Donorbox under confidentiality agreements, and only as necessary to provide services related to Donorbox. However, we do share necessary data with trusted sub-processors to provide and improve our services (e.g., payment processing, email communications). The data shared is limited to what is essential for the sub-processor to perform their function. We ensure their compliance with data protection regulations through rigorous contractual agreements, regular compliance checks, and by requiring them to adhere to GDPR and other relevant laws.

How does Donorbox comply with GDPR and other data protection laws?

Donorbox is committed to complying with GDPR and other applicable data protection laws. We have implemented policies and procedures to ensure that the personal information of our users from the EU and other jurisdictions is handled in compliance with such regulations.

What happens to my data if I stop using Donorbox?

If you cease using Donorbox, you can request the deletion of your account and data. We will also automatically delete or anonymize your personal information in accordance with our data retention policy and applicable laws.

How can I report a security concern or data breach?

If you have any concerns about security or suspect a data breach, please contact us immediately at \[security@donorbox.org\]. We take all reports seriously and will investigate and respond swiftly to address the issue. In the unlikely event of a data breach, we have a predefined Incident Response Plan. We will notify affected clients without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with GDPR requirements. Notifications will include details about the nature of the breach, the data involved, and the steps we are taking to mitigate any potential harm.

What steps does Donorbox take to ensure compliance with financial regulations?

Donorbox complies with all applicable financial regulations, including anti-money laundering (AML) and counter-terrorism financing (CTF) standards. We conduct due diligence to ensure the legitimacy of transactions and work closely with financial institutions to adhere to these regulations.

How can I learn more about Donorbox's privacy practices?

For more detailed information about our privacy practices, please refer to our Privacy Policy available on our website. If you have specific questions, feel free to contact our support team.

Where is customer data stored?

At Donorbox, customer data is primarily stored in secure data centers located in the United States. We understand the importance of data protection regulations in the UK and EU. To ensure compliance with GDPR and other relevant laws, we are willing to enter into a Data Processing Agreement (DPA) that includes Standard Contractual Clauses (SCCs) to facilitate legal data transfers outside the UK/EU.

How long is customer data retained?

We retain customer data only for as long as necessary to fulfill the purposes for which it was collected, including complying with legal and regulatory obligations. Typically, transaction data is retained for a minimum of seven years to meet financial auditing and compliance requirements.

Show 7 more questions

Technology peers that completed SOC 2

Compare vs Action1 Compare vs ELJUN LLC Compare vs equipifi