Help centre / Account, security & billing / How we keep your charity's data safe
How we keep your charity's data safe
Your charity's records live in their own private store, never mixed with other charities. We encrypt every connection and copy backups off-site as you work. Only people you invite can sign in. Your data belongs to your charity, and you can take it with you.
Your charity's records are kept separate
Every charity on CharityControl gets its own private set of records. Meadowbank Community Trust's minutes, risks and supporter details are stored on their own, never mixed with any other charity's. One charity can never see another's information.
Who can see your records?
Only the people you invite. They sign in with a secure link sent to their email, so there's no password to be guessed or stolen. If someone leaves, an admin can switch off their access straight away.
Each person sees only what their role allows. A volunteer, a trustee and the treasurer each get a different view. We check this on our servers every time, so it can't be worked around in a browser. See roles and permissions.
We record every change in a history you can review: who changed what, and when. And you can't break anything by looking. Reading a page never changes a record.
Where is your data kept?
We host your data in the European Union and encrypt it while it travels between you and us. Card details never reach us at all. Stripe, the payment company, handles those.
What if something goes wrong?
As you work, we copy your records continuously to separate, encrypted storage elsewhere in the EU. We keep 30 days of these backups, and we test that they really do restore. So even if disaster struck our servers, an up-to-date copy of your records would still exist somewhere else.
Is your data used for anything else?
No. We never sell data, and there are no advertising trackers. Our AI features only see what the person using them is already allowed to see, and our AI provider doesn't train its models on your data.
Where can you read more?
Our Trust Centre covers all of this in more detail, including UK GDPR (data-protection law), the small list of companies that help us run the service, and how to report a security concern. If a funder asks your charity for a security questionnaire, email support@charitycontrol.co.uk and we'll complete it with you.