Security you can verify

Hope handles other people's money and medical stories. Security is not a feature — it is the foundation.

Safe giving. Stronger change. ♡

Report a security concernEmail security@hope.org or use Report on any campaign. We respond within 24 hours.

Safe giving. Stronger change. ♡

Trust & safety

Security you can verify

Hope handles other people's money and medical stories. Security is not a feature — it is the foundation. Every layer below is built so donors and families can verify how we protect what matters.

Encryption in transit

Industry standard

All connections use TLS 1.3. HSTS enforced in production. No sensitive data sent over unencrypted channels.

TLS 1.3 encryption
HSTS enforced
Regular security audits

PCI-compliant payments

Secure by design

We never store card numbers, CVV, or UPI PINs. When live keys are configured, Stripe or Razorpay hosted checkout handles tokenization. Hope only receives payment confirmations.

PCI DSS compliant
Tokenized payments
Trusted payment partners

Immutable ledger

Tamper-resistant

Every donation creates append-only ledger entries. Corrections use reversing entries — nothing is silently deleted.

Append-only records
Full audit trail
Public transparency

Platform security headers

Always on

Content Security Policy, X-Frame-Options DENY, nosniff, strict referrer policy, and permissions policy on every page.

CSP enabled
Clickjacking protection
Secure by default

Privacy without hiding amounts

Your choice

Choose anonymous mode — your identity is hidden on leaderboards, but donation amounts remain on the public transparency ledger.

Optional anonymity
Transparent amounts
You stay in control

Report a security concern

Email security@hope.org or use Report on any campaign. We respond within 24 hours.

Report an issue

Loading…