Start your security review
View & download sensitive information
Bonterra products streamline social good work across the full mission-driven sector - serving nonprofits, foundations, government agencies, and corporate giving programs with purpose-built software for grants management, fundraising, case management, civic engagement, and corporate social responsibility. Bonterra's integrated portfolio helps social good leaders reduce administrative burden, measure impact, and scale their mission at every stage of the funding and service delivery cycle.
Novartis
Cisco
Bank of America
Walmart
Verizon
Pfizer
CASA of Los Angeles
Phoenix Family
First 5 Riverside
Brooklyn Community Services
RISE for Youth
Feeding America
Special Olympics
National Audubon Society
NAACP
Data Access Level
3Impact Level
3Recovery Time Objective
3Multi-Factor Authentication
7Product Architecture
7Role-Based Access Control
7Network Diagram
4PCI DSS
3PCI DSS 4.0.1
2Other Self-Assessments
1Data Backups
8Encryption-at-rest
8Encryption-in-transit
8Application Penetration Testing
6Code Analysis
6Credential Management
6AI Monitoring
4AI Risk Management
4AI Governance
4Anti-Bribery and Corruption
8Anti-Competitive Practices
8Code of Ethics
7Subprocessors
6Cyber Insurance
8Data Processing Agreement
8Cookies
7Data Breach Notifications
5Data Out of System
7Data Access
4Logging
7Password Security
7Status Monitoring
7Amazon Web Services
7Anti-DDoS
7Disk Encryption
8Endpoint Detection & Response
8Threat Detection
7Firewall
4IDS/IPS
4Security Information and Event Management
4Asset Management Practices
6Email Protection
6Employee Training
7Acceptable Use Policy
7Access Control Policy
6Anti-Malicious Software Policy
7BitSight
6Security Headers
3We have a dedicated team that responds to security incidents. We are happy to provide more details about our incident response practices upon request.
Data Access/Impact Levels
6Risk Assessments
6Supply Chain Risk Management
6We have strict asset management policies in place to ensure that all assets are accounted for and secure.
We have a business continuity plan in place to ensure that we can continue to operate in the event of a disaster.
Employee Privacy Training
1Phishing Training
1Secure Development Training
1We have a change and configuration management process in place to ensure that changes are properly reviewed and approved.
We have physical and environmental controls in place to ensure that our data centers are secure and reliable.
We continuously monitor our systems for security threats and vulnerabilities. We are happy to provide more details about our continuous monitoring practices upon request.