Security & GDPR
Your data is safe with us
Security and privacy are built into Fundleaf from day one. We take the protection of your organisation's data as seriously as you do.
Security
Fundleaf is designed to meet the security expectations of organisations handling sensitive funding data.
UK-based infrastructure
All data is stored securely in the UK, hosted by trusted cloud providers. Your data never leaves the country.
Encryption at rest and in transit
All sensitive data including contact information, funding records and API keys are encrypted. All communications use HTTPS.
Daily backups
Your entire account is automatically backed up every day, with records stored for 30 days.
Access controls
Set fine-grained roles and permissions so your team members only access the data they need.
Two-factor authentication
Add an extra layer of login security with time-based one-time passwords or authenticator apps.
Audit logging
A complete history of all changes made to records, so you always know who did what and when.
Penetration testing
Regular independent security assessments to identify and address potential vulnerabilities.
Real-time monitoring
Automated systems continuously monitor for suspicious activity and block unauthorised access attempts.
GDPR
Stress-free GDPR compliance
Used well, the GDPR can build trust with your supporters and keep your data clean and compliant. Fundleaf was designed from the ground up to help you do this.
Consent tracking
Securely store contact and marketing preferences alongside any uploaded consent forms and compliance information.
Right to be forgotten
Permanently delete any contact's data along with all associated records and file attachments.
Right to access
Easily export any contact's data and send it directly to the requester.
Data filtering
Filter and segment data by consent date, marketing preferences, and more to maintain clean records.
Questions about security?
We're happy to discuss our security practices in more detail. Get in touch and we'll answer anything you need.