Security & Data

Your data is yours.
Payments are handled by Stripe.

We take a practical, security-minded approach to how we handle your organization's information and your donors' payments.

Security details

Payments are processed by Stripe

Cronac Give never stores credit card numbers or sensitive payment data. All donation payments are handled directly by Stripe, one of the world's most trusted payment processors. Stripe is PCI Service Provider Level 1 certified — the highest level of payment security certification available. When a donor enters their card details on a Cronac Give donation page, that data goes straight to Stripe. It never touches our servers.

Your data belongs to your organization

The donor records, giving history, notes, and other data in Cronac Give belong to your organization - not to us. You can export your data at any time, in full, with no gates or delays. If you ever decide to leave, you take your data with you.

Account and access controls

Access to your Cronac Give account is protected with standard authentication. Only authorized staff at your organization can access your donor data and settings. We use HTTPS across the entire platform and all data in transit is encrypted.

Stripe Connect — funds go directly to you

We use Stripe Connect, which means your organization connects its own Stripe account. Donations are deposited directly into your bank account by Stripe and they don't pass through Cronac Give at any point. We never hold your funds.

Data portability, always

We believe strongly in data portability. You can export your full donor list and donation history from Cronac Give at any time, in a standard format you can use anywhere. No support tickets required, no waiting.

Honest disclosure

We're early — and we're being upfront about it.

Cronac Give is an early access product. We've made practical, security-minded decisions throughout the platform — HTTPS everywhere, no stored payment data, Stripe Connect for fund handling, and careful access controls.

We're not going to make sweeping compliance claims we can't back up at this stage. What we will tell you is that we're building this with security as a priority, not an afterthought — and we'll always be transparent about what we do and don't do.

If you have specific security questions about your organization's use case, ask us directly.

Questions about security?

We're happy to talk through how we handle data. Reach out and we'll give you the details.