-
Donor Identity Structure Across Clients:
WeGive utilizes a centralized authentication system similar to Auth0, Shop Pay, or Stripe Link, where basic identity information (name, email, phone number) is recognized across multiple client portals or websites. This approach is widely adopted across various digital platforms to streamline the user experience, allowing users to conveniently access multiple services without repeatedly providing the same basic details. -
Salesforce Data vs. WeGive Data Ownership:
The identity data displayed when logging into another organization's portal is owned and managed exclusively by WeGive’s identity management system. It is not sourced directly from your Salesforce data. Your Salesforce-integrated data remains isolated within CHM’s secure tenant and is never directly accessible or exposed to other clients. -
User Authentication and Consent:
By logging into other organizations’ portals, the user explicitly authenticates and consents to the visibility and use of their basic profile information (name, email, phone number). This authentication step constitutes explicit permission from the user for their identity data to be surfaced within the authenticated organization. -
Documentation in Agreements:
This data-handling practice, including cross-portal identity recognition and authentication-driven data sharing, is clearly documented in WeGive’s Master Services Agreement (MSA), Terms and Conditions, and Privacy Policy. These documents transparently outline the scope and boundaries of how identity data is managed across our platform. -
SOC2 Compliance Assurance:
WeGive strictly adheres to SOC2 compliance requirements, maintaining rigorous privacy controls, data isolation, and robust security measures. Our processes and policies are regularly audited to ensure alignment with these standards. -
Configurability on Enterprise Plans:
While this identity-sharing functionality is intentionally designed for user convenience, we do offer configurable options to further isolate or restrict cross-portal identity visibility. This enhanced configurability is available exclusively through WeGive's Enterprise Plan.