The SHV online giving transactaions are securely processed by Fellowship Technologies.
Physical Security – All of our equipment and data is located within a guard controlled access facilitiy to ensure only authorized personnel can enter. And our servers are located within a private locked cage which is monitored 24×7 with an array of security cameras.
Network Security – The entire network is protected by firewalls and monitored by intrusion detection systems. Inside the firewalls, the systems are safeguarded by multiple network address translation, port redirection and other IP addressing schemes. Fellowship Technologies proactively monitors and analyzes all system logs to identify security threats.
Additionally, our data center utilizes systems for Intrusion Detection, Distributed Denial of Service, and many other external threats.
Lastly, we employ a company called ScanAlert to proactively test our network vulnerabilities. They test our sites daily to ensure we pass the FBI/SANS Internet Security Test. Their “live” HACKER SAFE mark appears only when a web site’s security meets the highest security scanning standards of the U.S. government, Visa, MasterCard, American Express, Discover and JCB.
Application Security – Our integrated application security architecture allows administrators fine-grained control over what each user can see and do. Additionally, countermeasures to application-level threats such as buffer overflow, cross-site scripting, SQL injection, and canonicalization have been addressed in Fellowship One.
Data Security – Fellowship One uses the strongest encryption products to protect customer data and communications. All data transferred over the network uses SSL encryption backed by 128-bit GeoTrust digital certification. Users can only access Fellowship One with a valid username, password and church code combination, which are encrypted via SSL while in transmission and encrypted within the database as well. All data entered into and stored within Fellowship One by a customer is owned by that customer. That means no one, not even Fellowship Technologies employees, has access to your data unless authorized by you.
Visa PCI Compliance – In addition to the many different security measures we take, we completed Visa’s Payment Card Industry (PCI) data security compliance audit. The PCI standards cover everything from network security, to application security, to background and credit check screening of our employees.
Backups – All customer data, up to the last committed transaction, is automatically backed up to disk and tape. Backups are stored offsite to allow full recovery in case of disaster. At least six different copies of the data, in a combination of formats both on-site and off-site.