1. Use a safe and secure payment processing tool<\/strong><\/h2>\nInternet threats and fraud schemes are real and innumerable. Bad actors can easily assail websites that are not properly safeguarded to collect sensitive data like credit card and bank account information. It is essential for you to take the necessary steps to make sure your donors\u2019 payment information is safe. One simple way to do this is to sign up for a payment gateway service that is PCI compliant.<\/p>\n
PCI compliance<\/h3>\n
PCI (Payment card industry) compliance is a series of requirements established by major credit card companies to ensure the safety of data being processed, stored, or transferred through online solutions.<\/p>\n
While using a PCI compliant gateway is not required by law, it garners your donors\u2019 trust and makes it more likely that you will receive donations from tech-savvy supporters. <\/p>\n
\n\n<\/i>\n\n\nDonorPerfect\u2019s in-house payment processing solution, SafeSave, offers low-cost transaction fees with no hidden costs, while still getting the high-tech security and PCI compliance<\/a> offered by larger processors. <\/p>\n<\/div>\n\n![\"A](\"https:\/\/uploads.donorperfect.com\/images\/sites\/2\/expert-webcast-1.jpg\")
<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\nElectronic wallets<\/h3>\n
Electronic wallets, like PayPal, offer built-in security and protection for your donors. PayPal is a familiar platform for millions of people worldwide and a trusted payment processor. Look for an online forms product, like DonorPerfect\u2019s donation forms<\/a>, that will allow you to link your organization\u2019s PayPal account and offer it as a payment option to your donors. PayPal even provides the opportunity to create monthly gifts that will continue to regularly process recurring payments.<\/p>\n<\/div>\n<\/div>\n\n<\/header>\n2. Make it standard to practice safe data procedures<\/strong><\/h2>\nEven government agencies with access to the best safeguards can be vulnerable to cyber-attacks. It\u2019s important to guard against such attacks by setting policies in place that will protect your donors\u2019 most sensitive information. With your staff, gather a list of information that should NOT be stored in your database. Discuss with your team if it is absolutely essential to keep data stored, and determine a time limit on how long you hold on to information that is vulnerable to attack.<\/p>\n
Examples of data that should NOT be stored:<\/strong><\/p>\n\n- Bank account and credit card information (DonorPerfect does not store this type of data, this information is stored in our PCI compliant gateway)<\/li>\n
- Social Security numbers<\/li>\n
- Medical records<\/li>\n
- Government-issued IDs<\/li>\n
- Alien registration numbers<\/li>\n
- Criminal records<\/li>\n
- Legal records<\/li>\n<\/ul>\n<\/div>\n<\/div>\n\n
<\/header>\n3. Set access limits<\/strong><\/h2>\nSome organizations have a lot of staff, volunteers, and board members accessing their database. While each individual may have a need to view information, most likely not all parties need to be granted permissions to all functionalities. After all, there are a lot of tools in a database that can make major and unexpected changes, and it\u2019s important that only those who are more well-versed in the database be given permissions.<\/p>\n
In DonorPerfect, you can <\/strong>restrict access<\/strong><\/a> in a number of ways: <\/strong><\/p>\n\n- Limit access to specific fields<\/li>\n
- Limit access to records such as donor, contact, or gift records<\/li>\n
- Limit access to tools and functionalities<\/li>\n
- Limit actions a user can perform on records (view, edit, and delete rights)<\/li>\n<\/ul>\n
In addition to setting certain limits on access, it is also important to remove permissions entirely when an individual is no longer serving your organization. In order for these limits to work, it is also essential that those using your database not share a username. Each person logging in should be doing so with their own credentials. Make sure the right people at your organization know how to create users<\/a>, set permissions<\/a>, and deactivate or remove access<\/a>.<\/p>\n\n\n<\/i>\n\n\nDonorPerfect offers unlimited user IDs with security features like user groups to make setting and managing permissions<\/a> easy.<\/p>\n<\/div>\n\n![\"The](\"https:\/\/uploads.donorperfect.com\/images\/sites\/2\/user-management-1.png\")
<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n<\/header>\n4. Use security features that are offered<\/strong><\/h2>\nA lot of software products offer security features, but it is up to the user to set them up and use them. These features could be options like setting expiration dates on passwords<\/a>, setting requirements to ensure passwords are complex enough, and connecting IP addresses to logins.<\/p>\nPassword Expirations<\/h3>\n
As an additional security measure, you can set a protocol for passwords to be changed at a certain frequency. Changing passwords often will help to keep your database safe from intruders, and will disable access to anyone who may have infiltrated with a previously created password.<\/p>\n
\n\n<\/i>\n\n\nDonorPerfect allows you to set expiration dates on passwords<\/a>. An admin user can select the length of time after which a password will expire. Then, the system will automatically force a user to change their password before logging in again.<\/p>\n<\/div>\n\n![\"DonorPerfect](\"https:\/\/uploads.donorperfect.com\/images\/sites\/2\/DonorPerfect-password-parametersv2.png\")
<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\nPassword Requirements<\/h3>\n
Password requirements<\/a> help ensure the complexity of passwords, making it hard for a person\u2019s credentials to be guessed. Requirements could include things like upper and lower case characters, special characters like a dollar sign or an asterisk, and a minimum length of characters. DonorPerfect passwords require at least nine characters as well as at least three special characters and upper and lower case letters.<\/p>\nIP address restrictions<\/h3>\n
Setting restrictions on the IP addresses<\/a> accessing your database is another excellent tool you can use to protect your database. An IP address is not a physical address, but rather a numerical label assigned to a device that is connected to a computer network. Some softwares, like DonorPerfect, allow you to define what IP addresses can be used to log in to your database. This provides an additional layer of security for any users who may have gained access to your passwords but are not using an IP address with permissions.<\/p>\n<\/div>\n<\/div>\n\n<\/header>\n5. Regularly reconcile your database<\/strong><\/h2>\nReconciliation is an essential task in ensuring no data entry errors have been made and funds are where they need to be. It\u2019s a good idea to have a regular schedule for how often and who should be in charge of reconciliation. If you have the bandwidth, it is even advisable to have multiple people perform separate, but matching reconciliations to create a set of checks and balances among your team. If you work with multiple databases, you may want to perform cross-reconciliation as well.<\/p>\n
Establishing procedures for your organization may not be at the forefront of your mind when you have countless fundraising tasks to attend to, but it is essential to keeping your donors\u2019 data safe and your organization thriving. Once procedures and policies are in place, they work to keep your nonprofit running smoothly, especially during difficult or transitional times.<\/p>\n
When it comes to creating a policy guide, DonorPerfect can help. Download our Clean Data Checklist<\/a> for help on everything from data entry procedures to keeping your most sensitive information safe and secure.<\/p>\n<\/div>\n<\/div>\nDownload your Clean Data Checklist<\/h2>\n
DonorPerfect\u2019s in-house payment processing solution, SafeSave, offers low-cost transaction fees with no hidden costs, while still getting the high-tech security and PCI compliance<\/a> offered by larger processors. <\/p>\n<\/div>\n Electronic wallets, like PayPal, offer built-in security and protection for your donors. PayPal is a familiar platform for millions of people worldwide and a trusted payment processor. Look for an online forms product, like DonorPerfect\u2019s donation forms<\/a>, that will allow you to link your organization\u2019s PayPal account and offer it as a payment option to your donors. PayPal even provides the opportunity to create monthly gifts that will continue to regularly process recurring payments.<\/p>\n<\/div>\n Even government agencies with access to the best safeguards can be vulnerable to cyber-attacks. It\u2019s important to guard against such attacks by setting policies in place that will protect your donors\u2019 most sensitive information. With your staff, gather a list of information that should NOT be stored in your database. Discuss with your team if it is absolutely essential to keep data stored, and determine a time limit on how long you hold on to information that is vulnerable to attack.<\/p>\n Examples of data that should NOT be stored:<\/strong><\/p>\n Some organizations have a lot of staff, volunteers, and board members accessing their database. While each individual may have a need to view information, most likely not all parties need to be granted permissions to all functionalities. After all, there are a lot of tools in a database that can make major and unexpected changes, and it\u2019s important that only those who are more well-versed in the database be given permissions.<\/p>\n In DonorPerfect, you can <\/strong>restrict access<\/strong><\/a> in a number of ways: <\/strong><\/p>\n In addition to setting certain limits on access, it is also important to remove permissions entirely when an individual is no longer serving your organization. In order for these limits to work, it is also essential that those using your database not share a username. Each person logging in should be doing so with their own credentials. Make sure the right people at your organization know how to create users<\/a>, set permissions<\/a>, and deactivate or remove access<\/a>.<\/p>\n DonorPerfect offers unlimited user IDs with security features like user groups to make setting and managing permissions<\/a> easy.<\/p>\n<\/div>\n A lot of software products offer security features, but it is up to the user to set them up and use them. These features could be options like setting expiration dates on passwords<\/a>, setting requirements to ensure passwords are complex enough, and connecting IP addresses to logins.<\/p>\n As an additional security measure, you can set a protocol for passwords to be changed at a certain frequency. Changing passwords often will help to keep your database safe from intruders, and will disable access to anyone who may have infiltrated with a previously created password.<\/p>\n DonorPerfect allows you to set expiration dates on passwords<\/a>. An admin user can select the length of time after which a password will expire. Then, the system will automatically force a user to change their password before logging in again.<\/p>\n<\/div>\n Password requirements<\/a> help ensure the complexity of passwords, making it hard for a person\u2019s credentials to be guessed. Requirements could include things like upper and lower case characters, special characters like a dollar sign or an asterisk, and a minimum length of characters. DonorPerfect passwords require at least nine characters as well as at least three special characters and upper and lower case letters.<\/p>\n Setting restrictions on the IP addresses<\/a> accessing your database is another excellent tool you can use to protect your database. An IP address is not a physical address, but rather a numerical label assigned to a device that is connected to a computer network. Some softwares, like DonorPerfect, allow you to define what IP addresses can be used to log in to your database. This provides an additional layer of security for any users who may have gained access to your passwords but are not using an IP address with permissions.<\/p>\n<\/div>\n Reconciliation is an essential task in ensuring no data entry errors have been made and funds are where they need to be. It\u2019s a good idea to have a regular schedule for how often and who should be in charge of reconciliation. If you have the bandwidth, it is even advisable to have multiple people perform separate, but matching reconciliations to create a set of checks and balances among your team. If you work with multiple databases, you may want to perform cross-reconciliation as well.<\/p>\n Establishing procedures for your organization may not be at the forefront of your mind when you have countless fundraising tasks to attend to, but it is essential to keeping your donors\u2019 data safe and your organization thriving. Once procedures and policies are in place, they work to keep your nonprofit running smoothly, especially during difficult or transitional times.<\/p>\n When it comes to creating a policy guide, DonorPerfect can help. Download our Clean Data Checklist<\/a> for help on everything from data entry procedures to keeping your most sensitive information safe and secure.<\/p>\n<\/div>\n<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\nElectronic wallets<\/h3>\n
2. Make it standard to practice safe data procedures<\/strong><\/h2>\n
\n
3. Set access limits<\/strong><\/h2>\n
\n
<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\n<\/div>\n4. Use security features that are offered<\/strong><\/h2>\n
Password Expirations<\/h3>\n
<\/figure>\n<\/div>\n<\/div>\n<\/div><\/div>\n<\/div>\n<\/div>\nPassword Requirements<\/h3>\n
IP address restrictions<\/h3>\n
5. Regularly reconcile your database<\/strong><\/h2>\n
Download your Clean Data Checklist<\/h2>\n