Security
Last updated: October 16, 2026
Nonprofits deserve straight answers about security. Here's how HelpOne Software, LLC protects your mission data, how payments work, and what we practice every day, without overselling.
1. How it works today
- Payments (PCI DSS): card payments run through PCI DSS Level 1 payment processors, and card details are entered into the processor's secure fields. HelpOne is not designed to store full card numbers (PAN) on our systems.
- Encryption: data is protected with modern encryption in transit (TLS) and at rest using industry-standard AES-256 approaches.
- GDPR-aligned practices: we follow GDPR-aligned data handling practices (access, retention, and deletion requests). This is not a separate "GDPR certificate".
- HIPAA: HelpOne can support nonprofits that handle sensitive operational data, but we do not claim a blanket HIPAA certification. Ask us if you need a BAA discussion for your use case.
2. Day-to-day protections
- Access controls: role-based access so staff only see what they need. You control who is in your organization's account.
- Data separation: each organization's data is kept separate from every other organization's in the database.
- Account security: passwords are stored only as secure hashes, sign-in attempts are rate-limited, and connection credentials for other services are encrypted.
- Monitoring and backups: continuous monitoring of our environment and regular backups, so recovery is part of the plan, not an afterthought.
- Your data, your exit: export when you need to. We don't trap nonprofit data behind scare tactics; portability is part of trust.
3. If something goes wrong
If a security incident affects your data, we will tell affected customers without undue delay, and within 72 hours of confirming it, with the information you need to respond. To report a security concern, email hello@helponesoftware.com with "Security" in the subject line and we will treat it as urgent.
4. Questions and diligence
Questions about security reviews or questionnaires? Email hello@helponesoftware.com; we're happy to walk through diligence. See also our Privacy Policy and Data Processing Addendum.