Donorbox is an American fundraising software company founded by Charles Zhang in 2014 and currently headquartered in Alexandria, Virginia. It provides tools through which individuals and nonprofit organizations can accept online donations.
Summary from Wikipedia.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
-
PCI DSS
Payment card industry standard for handling cardholder data securely.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
Compliance timeline
-
2014
Company founded
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Donorbox discloses on its trust center. Linked entries have their own profile in the Trust Index.
71% chain trust: 22 of 31 disclosed subprocessors are themselves in the Trust Index.
- AWS Cloud Infrastructure & Data Hosting
- CrowdStrike Endpoint Security & Monitoring
- PayPal Payment Processing & Merchant Gateway
- Stripe Billing & Credit Card Processing
- ActiveCampaign Marketing Automation & Outbound Comm.
- BambooHR HRIS & Personnel Records
- Basecamp Project Management & Team Collaboration
- Brex Corporate Cards & Spend Management
- Checkr Background Screening
- Cloudflare CDN, DNS, & Edge Security
- Confluence Internal Knowledge Base & Wiki
- Deel (Access) Global Payroll & EOR Services
- GitHub Source Code & CI/CD Pipelines
- Gong Revenue Intelligence & Call Analytics
- Google Workspace Corporate Productivity & Cloud Services
- Heroku Managed Application Hosting
- HubSpot CRM & Customer Growth Tracking
- Jamf Mobile Device Management (MDM)
- Jira Project Management & Bug Tracking
- KnowBe4 Security Awareness Training
- Mailchimp Email Marketing & Newsletters
- Plaid Financial Verification API
- Rapid7 Vulnerability Scanning & Monitoring
- Rippling Workforce Platform & Unified HR / IT
- salesforce Customer Relationship Management
- Slack Team Collaboration & Chat
- Twilio Transactional Email Infrastructure
- Vanta Continuous Compliance Monitoring
- Zapier Automation & Workflow Integrations
- Zendesk Customer Support Ticketing
- Zoom Video Conferencing & Webinars
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
