GoodForUs moves money for churches, schools, nonprofits and the people who support them. Protecting that money, and the people behind it, is built into how the platform works.
Card payments, online and in person, are handled by our payment processor, which is certified to the Payment Card Industry Data Security Standard. Your full card number and security code go directly to the processor and are never stored by GoodForUs.
Information is encrypted when it travels between you and GoodForUs, and encrypted where we store it, including identity documents and backups. We use current, industry-standard encryption.
We require strong passwords, protect against repeated sign-in attempts, and offer two-step verification, including passkeys. Sensitive actions on an account ask for extra confirmation. We encourage everyone to turn on two-step verification.
People who work in an organization's account see and do only what their role needs. Access by GoodForUs staff is limited and recorded, and the most sensitive actions require more than one person.
We verify the organizations and people who raise money, screen payments against government sanctions lists, and monitor activity for signs of fraud. Where we see a risk, we may pause a payment or an account while we look into it.
Identity checks are carried out by GoodForUs, with the person's consent, and the documents and images involved are handled as our Privacy Policy describes.
If you believe you have found a security problem, please email security@solutionsae.com. Please do not access data that is not yours, and give us reasonable time to fix the problem before telling anyone else. We will not pursue anyone who reports a problem to us in good faith and within these limits.