How does Donorbox keep payment data secure?
Donorbox uses Stripe's secure token mechanism. Card numbers are tokenized (the number is changed to a undecipherable string eg `tok_fafds23423') before we charge the card. Saved cards & bank account for recurring donations are also tokenized. Therefore, Donorbox doesn't have ANY record of the donor's card number in our database and logs. That means hackers will never get the sensitive card or bank information from us.
The transmission between the donors, the donorbox form, and Stripe is encrypted using 256bit SSL/TLS. Stripe is one the most secure and trusted payment provider. It is used by Twitter, Shopify, Kickstarter, and Lyft.