Know every supporter. Catch every lapse. Flag every fraud.

Minimal by default. Donor names and emails flowing through our smart-webhook receiver are SHA-256 hashed with a per-organisation pepper before they touch the database. We never persist the raw payload from your fundraising platform. Stripe shares the donor email on each charge so you can review flagged donations; we store that email so we can show it to you, and never share it beyond the sub-processors disclosed in our DPA. When you enable Supporter Trails (Partner), those data points are threaded into one per-supporter view, and you can switch your organisation into "masked" mode at any time to mask emails in the UI and disable AI-generated supporter summaries. We do not collect phone numbers, addresses, dates of birth, or card data.

Cause Shield never sees raw card data, so PCI DSS scope doesn't extend to us. Your payment processor remains the system of record. We do follow PCI-aligned operational practices: encrypted-at-rest storage, scoped access controls, and the monthly security scan covers our own infrastructure too. We don't hold a SOC 2 attestation yet and won't claim one until we do.

Radar only sees what Stripe processes, scored against Stripe's general e-commerce model. Cause Shield watches your entire donation funnel (including Funraisin / Raisely platform events, uptime, and traffic) and is tuned for nonprofit patterns where giving days, recurring gifts, and tribute donations look nothing like normal e-commerce. Most customers run both; we catch the gaps.

The script is roughly 3KB gzipped, loaded async with no render-blocking, and beacons events via sendBeacon so it never holds up navigation. We honour navigator.doNotTrack and add a per-page opt-out attribute. If you measure a regression, let us know. We're not interested in being the reason your donation form converts worse.

Our fraud scoring fails open by default: if we can't return a verdict in time, the donation proceeds and we log the miss. Your donation form never breaks because of us. Uptime checks run independently of the dashboard, so a Cause Shield outage doesn't blind your alerting either.

It's automated and defensive. We check TLS configuration, HTTP security headers, DNS hygiene (SPF, DKIM, DMARC, DNSSEC, CAA), exposed sensitive paths against a curated wordlist, and common misconfigurations, then Cause Shield's AI writes the report in plain English. We deliberately do NOT run active exploitation, port scans, fuzzing, brute-force, or authenticated tests; this is a configuration audit, not a penetration test. Treat it as continuous external posture monitoring and complement it with an annual manual penetration test by a human security engineer for regulated or high-stakes work.

We're built around Funraisin and Raisely first, but the smart webhook classifier handles arbitrary JSON, so most platforms work out of the box. If yours has an unusual payload shape, send a sample and we'll add explicit support, typically within a week, free.

Yes. Monthly billing, no annual lock-in, no setup fees. Cancel from your dashboard and you keep access through the end of the current billing period. We export your historical data as JSON or CSV on request, no charge.