Maxiva Giving
Maxiva Giving runs on your organization’s own website and systems, so you keep control of your donor data. Card details are handled by your payment provider, not stored by Maxiva.
Security & Data
Your Data Stays Yours
Nonprofits trust us with donor, payment, and program information. Here is how we protect it, in plain language.
Our commitments
You own your data.
Your donor, payment, and program data belongs to your organization. We use it only to deliver the work you ask for.
Card payments stay with your payment provider.
Donations are processed by Stripe or the payment provider you choose. Maxiva never stores card numbers.
Access is limited to your project team.
Only the Maxiva team members working with you can access your systems, each through their own account protected with multi-factor authentication. You can see who is working and what they log in the Maxiva Client Portal.
Data is encrypted.
Data we handle is encrypted.
You hold the accounts.
We work inside the platforms you already use, such as Salesforce, Stripe, and Microsoft 365, and follow their security features. Your organization keeps ownership of every account.
Our team follows clear rules.
Everyone who works on client systems signs Maxiva’s contractor agreement, which includes confidentiality and security requirements and rules for devices, passwords, and AI tools.
How we use AI
We use AI tools to work faster, but never at the expense of your privacy. Donor and payment data are never entered into AI tools that we have not approved for that use, and we use approved tools with your data only with your agreement.
If something goes wrong
We follow a written incident-response plan. If we learn of an incident that affects your data, we will tell you promptly and within the timeframe set out in your agreement with us, explain what happened, and work with you on next steps.
When our work ends
When a project or package ends, we remove our access, hand over credentials and documentation, and return or delete any of your data we hold, at your request.
What we don’t claim
Maxiva does not currently hold formal security certifications such as SOC 2. Card data is handled by your payment provider under its own PCI compliance. We are happy to complete your organization’s security questionnaire and to work within your own policies.
Questions boards often ask
Can Maxiva see our donors’ card numbers?
No. Card payments go through your payment provider, such as Stripe.
What happens to our data if we stop working with Maxiva?
You keep all of it. We remove our access and return or delete anything we hold, on request.
Who will work on our systems?
Your project manager and the named specialists on your project. You can see their work in the Maxiva Client Portal.
Can you complete our security questionnaire?
Yes. Contact us and we will send it back completed.
Have a security question?
We are glad to answer questions from your leadership, finance team, or board, and to complete your security questionnaire.
Contact UsOr email info@maxiva.tech. Current clients can email support@maxiva.tech.