Bonterra Logo
Start your security review
View & download sensitive information
ControlK

Bonterra Strategic Philanthropy helps increase employee engagement and streamline grants management in a cohesive corporate giving platform. In support of Bonterra's strong commitment to compliance and third-party risk management, we are pleased to provide our valued partners seamless access to our Information Security assurance reporting.

This transparency allows our partners to reduce friction during 3rd party auditing reporting requests and increases transparency to our current security posture.

  • Novartis
  • Cisco
  • Bank of America
  • Walmart
  • Verizon
  • Pfizer
  • CASA of Los Angeles
  • Phoenix Family
  • First 5 Riverside
  • Brooklyn Community Services
  • RISE for Youth
  • Feeding America
  • Special Olympics
  • National Audubon Society
  • NAACP
BONTERRA COMPLIANCEISO/IEC 27001:2022
2
Data Access Level
3
Impact Level
3
Recovery Time Objective
3
View more
Multi-Factor Authentication
6
Product Architecture
6
Role-Based Access Control
6
View more
Network Diagram
4
PCI DSS
3
PCI DSS 4.0.1
2
View more
Other Self-Assessments
1
Data Backups
7
Encryption-at-rest
7
Encryption-in-transit
7
View more
Application Penetration Testing
6
Code Analysis
5
Credential Management
5
View more
AI Monitoring
3
AI Risk Management
3
AI Governance
3
View more
Anti-Bribery and Corruption
7
Anti-Competitive Practices
7
Code of Ethics
6
View more
Subprocessors
5
Cyber Insurance
7
Data Processing Agreement
6
View more
Cookies
6
Data Breach Notifications
4
Data Out of System
6
View more
Data Access
3
Logging
6
Password Security
6
View more
Status Monitoring
6
Amazon Web Services
6
Anti-DDoS
6
View more
Disk Encryption
7
Endpoint Detection & Response
7
Threat Detection
6
View more
Firewall
3
IDS/IPS
3
Security Information and Event Management
3
View more
Asset Management Practices
6
Email Protection
6
Employee Training
6
View more
Acceptable Use Policy
7
Access Control Policy
6
Anti-Malicious Software Policy
7
View more
BitSight
6
Security Headers
3
Data Access/Impact Levels
6
Risk Assessments
6
Supply Chain Risk Management
6
View more
Employee Privacy Training
1
Phishing Training
1
Secure Development Training
1
View more
Built onSafeBase by Drata Logo