SOC 2 Type 1
SwipeTrack completed a SOC 2 Type 1 examination covering the XTru platform’s security, availability, and confidentiality controls.
Security & Trust
Security and reliability are foundational.
XTru supports payments, memberships, guest data, staff workflows, and integrations with core nonprofit systems. Security and reliability are built into how SwipeTrack operates the platform.
SOC 2 Type 1
SwipeTrack completed a SOC 2 Type 1 examination for the XTru platform.
Independent attestation of the security, availability, and confidentiality controls that support the XTru platform. Documentation is available through the SwipeTrack Trust Center.
SOC 2 Type 1
SwipeTrack completed a SOC 2 Type 1 examination covering the XTru platform’s security, availability, and confidentiality controls.
Secure infrastructure
Hardened cloud infrastructure with encryption in transit and at rest, routine patching, and operational controls.
Access controls
Role-based access, least-privilege defaults, and audit trails for staff and integrations.
Monitoring and vulnerability management
Continuous monitoring, log aggregation, anomaly detection, patching, and dependency review.
What we monitor and maintain
Secure infrastructure
Hardened cloud infrastructure with encryption in transit and at rest, routine patching, and operational controls.
Access controls
Role-based access, least-privilege defaults, and audit trails for staff and integrations.
Monitoring and vulnerability management
Continuous monitoring, log aggregation, anomaly detection, patching, and dependency review.
Data protection practices
Security practices designed around payments, memberships, guest data, staff workflows, and connected nonprofit systems.
Integration safeguards
Controls and monitoring for the data flows that connect XTru to core systems like Blackbaud Altru and Raiser’s Edge.
Staff access controls
Tools and practices that help organizations manage staff access, permissions, and operational accountability.
Backup and recovery practices
Routine backups and recovery procedures help protect operational data and service reliability.
How we work together to keep things secure.
What XTru protects
We secure the underlying platform: infrastructure, application code, access management, and systems that store and process guest, member, staff, and integration data.
What organizations control
You configure staff accounts, permissions, integrations, branding, and the data you collect — including how you communicate with members and guests.
Need security documentation for your team?
Reach out and we'll point you to the right materials, including SOC 2 documentation, data handling details, and our Trust Center.