Security
Built to protect every gift.
Ko takes your donors' trust as seriously as you do. Here's exactly how we keep your data and their payments safe.
A note from Ko
"Your donors are trusting you. You're trusting us. I don't take that lightly."
GiveKo is built on the same infrastructure banks and Fortune 500 companies rely on. We encrypt everything in transit and at rest, we never touch raw card numbers, and we scope every query to the smallest possible slice of data.
The essentials
Encryption in transit & at rest
Every request uses TLS 1.2+. All stored data — donor records, campaign details, receipts — is encrypted at rest using AES-256.
Least-privilege access
Row-level security policies enforce that team members only see the organization's data they've been invited to. Granular per-page permissions on every account.
Modern, monitored infrastructure
Hosted on globally distributed edge infrastructure with automatic failover, daily database backups, and continuous uptime monitoring.
We do not sell your data
Donor lists, giving history, campaign performance — all yours. No ad networks, no data brokers, no reselling. Ever.
Verified organizations only
Every organization is verified against the IRS Publication 78 list or manually reviewed by the GiveKo team before receiving a single dollar.
Two-factor & OTP
Individual donor accounts require a one-time code by email on first access, valid for 24 hours. Organization admins can require the same for their team.
Every dollar runs through Stripe.
GiveKo does not store credit card numbers. All payments — donations, tips, POS transactions, tickets, raffle entries — are processed by Stripe, one of the most trusted payment processors on the internet.
PCI-DSS Level 1
Stripe holds the highest level of certification available in the payments industry — audited annually.
Card numbers never touch our servers
Payment fields are hosted by Stripe. We only ever see a tokenized reference.
3D Secure & fraud protection
Stripe Radar screens every charge for fraud in real time using machine learning trained on billions of transactions.
Direct payouts to your bank
Funds settle from Stripe directly to your organization's connected bank account — GiveKo never holds your money.
Questions or concerns? Email security@giveko.com.