Rebel Idealist LLC

Rebel Idealist LLC hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.

Rebel Idealist LLC's SOC 2 report is available on request. Request access through SOC2C and we coordinate the company-side NDA and delivery.

Security isn't a single yes/no, but Rebel Idealist LLC is SOC 2 Type II compliant and holds GDPR, PCI DSS, SOC 2 Type II. SOC2C verifies its compliance posture and shows how strongly each fact is proven.

Rebel Idealist LLC hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@donorbox.org or via a /security page (Rebel Idealist LLC lists a security contact).

Rebel Idealist LLC lists 14 subprocessors on its trust center, including Amazon Web Services, Checkr, CrowdStrike, Jira, BambooHR. Buyers use this for fourth-party risk review.

Rebel Idealist LLC hosts on AWS. Data residency details are on its trust center.

Rebel Idealist LLC's trust center is at https://trust.donorbox.org. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.

Donorbox employs a comprehensive security strategy that includes encryption, network security, access controls, and regular security assessments to safeguard your personal information against unauthorized access and data breaches.

Absolutely. We use PCI-compliant payment processors to handle all financial transactions. This means that your payment details are encrypted and processed securely according to the highest industry standards.

Donorbox uses your information to process donations, provide receipts, and communicate with you about your donations and our campaigns. We respect your privacy and ensure that your data is used only for the purposes you have consented to. We maintain transparency by clearly outlining our data collection and processing practices in our Privacy Policy and Terms of Service. Users are informed about the types of data collected, the purposes for processing, and their rights regarding their personal data. We also provide mechanisms for users to access, correct, or delete their data upon request, ensuring compliance with data protection laws.

Yes, you have the right to access, modify, and delete your personal information that we hold. You can do this by logging into your Donorbox account or contacting our support team for assistance.

We do not sell or rent your personal information to third parties. Information may be shared with trusted partners who work on behalf of or with Donorbox under confidentiality agreements, and only as necessary to provide services related to Donorbox. However, we do share necessary data with trusted sub-processors to provide and improve our services (e.g., payment processing, email communications). The data shared is limited to what is essential for the sub-processor to perform their function. We ensure their compliance with data protection regulations through rigorous contractual agreements, regular compliance checks, and by requiring them to adhere to GDPR and other relevant laws.

Donorbox is committed to complying with GDPR and other applicable data protection laws. We have implemented policies and procedures to ensure that the personal information of our users from the EU and other jurisdictions is handled in compliance with such regulations.

If you cease using Donorbox, you can request the deletion of your account and data. We will also automatically delete or anonymize your personal information in accordance with our data retention policy and applicable laws.

If you have any concerns about security or suspect a data breach, please contact us immediately at \[security@donorbox.org\]. We take all reports seriously and will investigate and respond swiftly to address the issue. In the unlikely event of a data breach, we have a predefined Incident Response Plan. We will notify affected clients without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with GDPR requirements. Notifications will include details about the nature of the breach, the data involved, and the steps we are taking to mitigate any potential harm.

Donorbox complies with all applicable financial regulations, including anti-money laundering (AML) and counter-terrorism financing (CTF) standards. We conduct due diligence to ensure the legitimacy of transactions and work closely with financial institutions to adhere to these regulations.

For more detailed information about our privacy practices, please refer to our Privacy Policy available on our website. If you have specific questions, feel free to contact our support team.

At Donorbox, customer data is primarily stored in secure data centers located in the United States. We understand the importance of data protection regulations in the UK and EU. To ensure compliance with GDPR and other relevant laws, we are willing to enter into a Data Processing Agreement (DPA) that includes Standard Contractual Clauses (SCCs) to facilitate legal data transfers outside the UK/EU.

We retain customer data only for as long as necessary to fulfill the purposes for which it was collected, including complying with legal and regulatory obligations. Typically, transaction data is retained for a minimum of seven years to meet financial auditing and compliance requirements.