Sunset over Black Butte and Mt. Jefferson, Central Oregon

Trust & Security

Your money never touches our hands.

Photo: U.S. Forest Service, Deschutes National Forest (public domain)

Anyone who has served on a booster board knows the worry that comes with handling a community’s money. We built the platform so that worry cannot exist by design: gifts settle straight into your program’s own account, with a paper trail the whole board can read.

Where your money lives

1

A donor gives

on your program's page. The card goes into Stripe's secure fields. The card number never touches our servers.

2

Stripe processes it

with fraud screening on every gift. Stripe is a PCI DSS Level 1 certified processor, the same rails behind Amazon and Shopify.

3

It settles to your account

your program's own Stripe account, in your program's name, connected to your program's bank. Money never sits in an NW Peak account. We could not spend it if we wanted to.

4

Your board can see everything

every gift, every fee, every payout, with donor, amount, date, and where it went. Board-meeting ready, always.

Payments powered by Stripe

Every dollar moves on Stripe and lands directly in your program's own account. Card and bank details go to Stripe, never to us. Stripe is a PCI DSS Level 1 certified processor.

What is actually in place

The controls that run today, in plain language. Ask on the call and we will show you any of them live.

Two-factor sign-in for admins

School and club administrators sign in with a second factor. A leaked password on its own does not open the money.

Sensitive fields encrypted at rest

Personal details that need extra care are encrypted in the database, with the key held outside the database and escrowed.

Nightly reconciliation

Every night the platform compares Stripe's record of charges against its own ledger in both directions and flags any gap to us before it reaches you.

Role-scoped access

Coaches see their program, administrators see their school, families see their athlete. Every server action checks the role before it does anything.

Rate limits and monitoring

Public endpoints are rate-limited and errors are monitored in real time, with personal data scrubbed before anything is logged.

Encrypted in transit, always

TLS everywhere with HTTP Strict Transport Security preloaded, so browsers refuse to load the site or the app insecurely.

Donors manage their own gifts

Recurring donors get a signed link to pause or cancel without calling anyone. Receipts and manage links are automatic.

Oregon filings, done for you

NW Peak is a registered professional fundraising firm (PF-1811) and files the state solicitation paperwork for each campaign. The platform will not open a campaign before its filing window has passed.

The standing pledges

No ads. Ever.

Not on any page, at any price. Your families and donors are not an audience we sell.

Your data is never sold

Athlete, family, and donor data exists to run your programs and for nothing else. No brokering, no partners, no side business. Export everything, anytime.

Every number on a public page

The whole price list is on the homepage, in writing, before you sign. If a fee is not printed, we do not charge it.

Built for the youth-safety rules

There is no private adult-to-athlete channel on Peak. Anything that reaches an athlete reaches their parent or guardian too, and texts go only to adults who opted in.

The paperwork behind the pledges: Privacy · Terms · Refunds · SMS program

Built for the treasurer’s peace of mind.

Bring your board’s hardest questions. I will answer every one in plain numbers. That is the whole point of how this was built.

Book a call with Branden →See every fee