TRANSACTION SECURITY

Credit Card security
Level 1 PCI compliant processing is used by Goodbricks, which offers top-tier payment gateways. Tokenized and encrypted credit card information is never kept on Goodbricks systems.​
BOT PREVENTIONS
Every day, all websites get bot traffic. Using Google's ReCaptcha technology, all Goodbricks forms verify that data is being entered by a human and not a computer program. This safeguards your mailing list against spam and unauthorized credit card charges made through your donation forms.
EMAIL VALIDATION
Goodbricks verifies all email addresses of users and supporters as they enter our system in real-time to guard against spammers and fraudulent behavior. This maintains the accuracy and integrity of all the data used to perform transactions through your Goodbricks account.​
SSL ENCRYPTION
Additionally, as you might imagine, SSL is used to encrypt all Goodbricks pages and gateways (Secure Socket Layer). This indicates that any data entered on a Goodbricks site, including credit card numbers, passwords, and emails, is encrypted and secure.​

FRAUD PROTECTION

We use the following methods to protect your account from fraud:
  • Web Application Firewall Request Filtering
  • Gateway protection including Address Verification Service (AVS), CVV Validation, Risk Scoring, reCAPTCHA
  • Human monitoring

​PRIVACY & DATA SECURITY

Your data belongs to you and only you, and keeping it secure is our priority. Goodbricks uses secure data centers through Amazon Web Service (AWS), which is the industry leader and standard for data security and hosting. AWS is accredited under:
  • ISO 27001
  • SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
  • FISMA Moderate
  • Sarbanes-Oxley (SOX)
When you use the Goodbricks platform, we are committed to making sure that your personally identifiable information is kept private and that it won't be shared without your permission. You always have the option to export all of your Goodbricks data. Please see our Privacy Policy for more information.

​SERVER UPTIME & SECURITY

# AWS Virtual Private Cloud
​# Network Level Vulnerability Scanning
# Level 1 PCI Compliant
​# 24x7X365 Security Scanning and Threat Monitoring
# WAF and DDoS Protection
# Regular Penetration Testing

ADDITIONAL CONTROLS YOU CAN ADD

Even while all organizations have similar cybersecurity requirements, no two are completely alike. Use Goodbricks' extra security features to protect your account and develop a fraud prevention strategy unique to your business.
  • Two-Factor Authentication
  • Multi-admin with granular permission levels
  • Unusual sign-on notifications
  • IP address and location-based restrictions for access
Since our founding in 2019, Goodbricks has not lost a dollar to fraud and had zero security breaches – we’ve effectively blocked all attempts.

REQUEST A LIVE DEMO TO SEE GOODBRICKS IN ACTION