Blackbaud provides the following reports to hosted clients, their auditors, and prospective clients:
  • SOC 2 Type II for the hosting environment containing the following solutions:
    • Altru
    • Blackbaud CRM
    • Blackbaud Merchant Services
    • Blackbaud MobilePay
    • Blackbaud NetCommunity
    • Blackbaud Online Express
    • Blackbaud Payment Service
    • Blackbaud Secure Payments
    • Blackbaud Sphere
    • Education Edge
    • eTapestry
    • Financial Edge
    		 
    • Luminate Online
    • Raiser's Edge
    • RE Mobile
    • Research Point
    • Target Analytics
    • Team Approach
       
  • SOC 1 Type II for the following solutions:
    • Blackbaud CRM
    • Blackbaud Merchant Services
    • Blackbaud Sphere
    • DonorDirect
    • Financial Edge
    • Luminate Online
    • MicroEdge
  • Bridge Letters for SOC 1 and SOC 2 reports
  • PCI DSS Attestation of Compliance for Blackbaud Internet Services includes the following solutions:
    • Altru
    • Blackbaud CRM
    • Blackbaud Merchant Services
    • Blackbaud NetCommunity
    • Blackbaud Online Express
    • Blackbaud Secure Payments
    • Blackbaud Sphere
    • eTapestry
    • Luminate Online
    • Mobile Pay
    • MFT-Linoma
    • Raiser's Edge
    • Brennan IT
  • PCI DSS Attestation of Compliance for the following solutions:
    • Blackbaud Payment Services (BBPS)
    • everydayhero
    • SmartTuition
  • CenturyLink (formerly Savvis) and vXchnge (formerly SunGard) Data Centers (third party hosting provider) SOC 1 Type II
  • HIPAA Compliance Report for Blackbaud CRM (BBCRM)
Click Chat with Support or Create a Case, if available for your solution, and include the information below. Reports will be customized and generated for your organization within 3 - 5 business days.
  1. The report(s) you're requesting from the list above
  2. The reason for the report request
  3. The hosted Blackbaud products or services you use (including Blackbaud Merchant Services and Blackbaud Payment Services)

Notes:
  • The audit reports pertain to the hosted environment only and are unavailable for non-hosted products and services.
  • For more information about Service Organization Control Reports (SOC), visit the AICPA website.