Fundraise the right way, globally
Secure your data, meet global standards, and check every fundraising compliance box with Fundraise Up, the only GDPR compliant fundraising software platform backed by enterprise-grade certifications and built for fundraising compliance peace of mind.
Trusted by the world’s top nonprofits
4.8/5
PCI DSS Level 1 4.0.1
Security
PCI DSS Level 1 4.0.1 compliance ensures that Fundraise Up meets over 300 security control requirements to safeguard your donor’s transactional data.
SOC 2 Type II
Security
Fundraise Up adheres to the strictest security practices, protecting your nonprofit from the negative effects of breaches, such as regulatory action and reputational damage.
ISO 27001
Security
ISO 27001 compliance ensures that Fundraise Up has appropriate policies, procedures and safeguards in place as part of its information security management system.
GDPR
Privacy
GDPR is a legal framework that sets guidelines for the collection and processing of personal information from individuals who live in the European Union (EU).
PIPEDA
Privacy
PIPEDA is a Canadian privacy law that governs how private sector organizations collect, use, and disclose personal information in order to carry out their business.
WCAG 2.2 AA
Accessibility
By adhering to these Web Content Accessibility Guidelines (WCAG), we ensure that your donation platform meets any regulatory or compliance requirements for accessibility.
Transparency you can rely on
Security, privacy, and compliance are built into every part of Fundraise Up. Our Trust Center provides full visibility into certifications, policies, and safeguards protecting your organization and donors.
Explore the Trust CenterRegion-specific features
For global fundraising, localization is essential, especially when it comes to meeting regional laws. Fundraise Up helps you stay compliant, so you can rest easy knowing every requirement is handled, wherever you fundraise.
Learn more
Online Fundraising Security
See Fundraise Up's comprehensive security tools and compliances that safeguard your nonprofit and your donors.
Learn more
FAQ
What compliance certifications does Fundraise Up hold?
Fundraise Up holds six core certifications and standards: PCI DSS Level 1 (4.0.1), SOC 2 Type II, ISO 27001, GDPR, PIPEDA, and WCAG 2.2 AA. Together these cover payment security, information security management, EU and Canadian data privacy, and accessibility. Audit reports and policy documents are available in our Trust Center.
Is Fundraise Up PCI DSS compliant?
Yes — Fundraise Up is PCI DSS Level 1 certified at the latest 4.0.1 standard, the highest tier of payment-card security compliance. Level 1 certification requires meeting more than 300 individual control requirements and applies to organizations processing more than 6 million card transactions annually.
Is Fundraise Up GDPR compliant for European donors?
Yes. Fundraise Up is GDPR compliant for donor data collection, processing, and retention across all EU member states, and also meets UK GDPR requirements. The platform handles lawful basis tracking, consent capture, donor data access requests, and right-to-erasure workflows — so nonprofits can fundraise in Europe without building separate compliance pipelines.
Does Fundraise Up support PIPEDA compliance for Canadian fundraising?
Yes. Fundraise Up is PIPEDA compliant, the Canadian privacy law that governs how organizations collect, use, and disclose personal information. Combined with our 99.99% uptime and donor data protections, this means Canadian nonprofits like Canadian Red Cross and Sandra Schmirler Foundation can fundraise with full regulatory confidence.
Is Fundraise Up’s donation form accessible (WCAG 2.2 AA)?
Yes. Fundraise Up meets WCAG 2.2 Level AA standards, the recognized benchmark for digital accessibility. This includes screen reader support, keyboard navigation, color contrast compliance, and ARIA semantic markup throughout the donor journey — helping your nonprofit meet legal accessibility requirements and reach all donors.
What does SOC 2 Type II certification mean for nonprofits?
Fundraise Up holds SOC 2 Type II certification, which validates that our security controls operate effectively over a sustained period — not just at a point in time. The certification covers security, availability, processing integrity, confidentiality, and privacy. Annual audits are performed by an independent third-party auditor, and reports are available under NDA from our Trust Center.
Where can our IT and legal team review Fundraise Up’s audit reports?
All certifications, policy documents, audit reports, and compliance attestations are published in the Fundraise Up Trust Center at trust.fundraiseup.com. The Trust Center is updated continuously and is the single source of truth for legal, IT, and procurement teams reviewing Fundraise Up.
Does Fundraise Up handle region-specific compliance like Gift Aid and tax receipting?
Yes. Fundraise Up automatically applies region-specific compliance based on a donor’s location, including UK Gift Aid eligibility, Canadian charitable receipt formats, and country-specific donor data fields. Tax receipts are issued in formats that meet the requirements of each nonprofit’s country of operation.
Related blog articles
See Fundraise Up’s innovative features in action
See Fundraise Up’s comprehensive security tools and compliances that safeguard your nonprofit and your donors.
Request a demo