Security Information

Product Security

Permissions

Fundmetric enables permission levels within the app to be set for your teammates. Permissions can be set to include the ability to edit or view constituent.

Password and Credentials

Credentials are stored using secure hash algorithms.

Uptime

Fundmetric has an uptime of 99.9% or higher.

Network and Application Security

Data Hosting and Storage

Fundmetric is hosted in Toronto, Ontario Canada and in Montreal, Quebec, Canada. US customers are hosted in the Virginia Region of the United States.

Virtual Private Cloud

All of our servers are within our own virtual private cloud (VPC) with network access control lists that prevent unauthorized requests.

Encryption

All data sent to or from Fundmetric is encrypted in transit using 256 bit encryption.

Back Ups and Monitoring

Backups are weekly for all constituent data.

Permissions and Authentication

Fundmetric is served 100% over https. Access to constituent data is limited to authorized employees who require it for their job.  Fundmetric runs a zero-trust corporate network. There are no corporate resources or additional privileges that come from being on Fundmetric’s network. We have Single Sign-on (SSO), 2-factor authentication (2FA) and strong password policies on tools used to build the Fundmetric platform to ensure access to cloud services are protected.

Incident Response

Fundmetric has a data breach protocol that is not publicly shared but that any customer can view upon request.

Additional Security Features

Confidentiality

All Fundmetric employment contracts include a confidentiality agreement that must be signed and returned prior to commencing employment.

Training

Annual Security and Awareness training is completed by all Fundmetric employees.

Policies

Fundmetric has developed, and frequently update, a comprehensive set of security policies. These policies cover a wide-range of topics and are shared with all employees.

PCI Obligations

All payments made to Fundmetric are administered through our partner, Stripe. Details about their security setup and PCI compliance can be found at Stripe’s security page.