Goodstack is on a mission to make it easy to do good. We empower your business to do good globally with our safe and efficient donation rails, as well as access a world of verified organizations.
Summary from the company’s website.
Publicly advertised compliance posture
As observed on September 8, 2026 on the organization’s public trust center.
-
ISO 27001
International standard for an information security management system, certified by accredited bodies.
-
SOC 2
Independent CPA audit of controls for security, availability, and confidentiality.
-
GDPR
Public claim of alignment with the EU General Data Protection Regulation.
Compliance timeline
-
September 8, 2026
Posture last observed by Trust Index
Subprocessors
Third parties Goodstack discloses on its trust center. Linked entries have their own profile in the Trust Index.
57% chain trust: 16 of 28 disclosed subprocessors are themselves in the Trust Index.
- Amazon Web Services Cloud provider
- Stripe Finance and Payments
- Google Communication and Translations
- Sendgrid (Twilio) Communication
- Airbyte Inc Data syncing for analytics processing
- Atlassian Assisting with operations
- Claude
- Cohere AI language model services for text generation and embedding.
- Currency Cloud Assisting with operations
- DeepL Machine translation of user-provided text.
- Entrust
- HubSpot Used for the company CRM, storing and managing all customer facing correspondence and business processes.
- MintMCP
- National Students Clearing House Student database used to enrich application data
- Open AI Assisting with operations
- OpenRouter Routing and orchestration of AI/LLM queries to downstream model providers.
- Outsourced Assisting with operations
- Refuel.AI Assisting with operations
- Solidroad Customer support
- Snowflake Data Warehousing
- The Software House Professional engineering services
- TruthScan Used for detect AI fabricated documents in the validation process
- Trustfull Fraud prevention for risk management service for identity signals (email, phone, IP)
- Teleperformance Assisting with operations
- Turbopuffer Vector database and semantic search infrastructure for AI retrieval.
- Typeform Collect information from non profits regarding software usage.
- Vercel Used in Engineering for dynamic hosting
- Zapier Assisting with operations
About this data
The Trust Index reports only what organizations publicly advertise. A missing framework here means no public claim was observed as of September 8, 2026; it never means an organization is non-compliant. HIPAA entries reflect a public claim of compliance; no HIPAA certification exists. Corrections are welcome and verified against public evidence. Read the full methodology.
