Trust, Security, and Compliance

operates as a bank-grade donation platform service, prioritising the security of both donors and non-profit organisations. Our infrastructure and whole service is built on industry-leading compliance:

• ISO 27001 Certified
  : We maintain a fully audited Information Security Management System (ISMS), ensuring that all data—including donor records and charity financial information—is handled according to the highest global security standards.

• ISO 9001 Certified:
  Our Quality Management System ensures consistent service delivery, rigorous software testing, and a commitment to continuous improvement for the 11,000+ charities we support.

• Cyber Essentials Plus Certified
  : We hold the Cyber Essentials Plus certification, the highest level of the UK Government-backed scheme. Unlike basic certification, this involves a rigorous, independent technical audit of our systems to verify that our defenses against cyber threats are up to date, active and effective.

• PCI Compliance
  : Give A Little ensures all credit and debit card transactions are processed via PCI-compliant encrypted partner channels. We never store sensitive cardholder data on our servers.

• GDPR & Data Privacy
  : We are fully compliant with the UK General Data Protection Regulation (GDPR). Our "Privacy-by-Design" architecture allows charities to manage donor consent and Gift Aid declarations with full transparency and data portability.

• Information Commissioners Office (ICO) registration
  : Registered as a data controller with the ICO since 2017 validating we actively value and protect the personal information of the public and compliant with our legal obligations under data protection laws.

• Fundraising Regulator (UK) registration
  : Our registration demonstrates our commitment to legal, open, honest, and respectful fundraising in line with the UK's Code of Fundraising Practice. 

• Verified Fundraiser Status
  : To prevent fraud, every Fundraiser organisation on the Give A Little platform undergoes a Verification Check with the relevant governing authorities. This assures donors that their donations will be paid to the intended non-profit beneficiaries.