Serious Data Security

CMDI makes every effort to ensure that your data is secure. From the physical security at our offices and caging facility to the multi-layered approach to protecting our data centers, you can trust us to keep your information safe and keep your focus on winning your campaign or raising money.

PCI Compliant Environment |

Keeping Personal & Financial Data Safe

Crimson keeps your fundraising donor data secure. CMDI and all credit cards processed through our Crimson and WidgetMakr products, follow the standards established by the PCI Security Council. Formal extensive penetration test are conducted on our systems per PCI standards.

In accordance with the PCI standards, credit card numbers are never written or stored in our software or on our hardware.

When credit card numbers are received in hard copy form, per compliance requirements, they are handled in secure and monitored physical environments. Physical credit card numbers are stored securely and blacked-out after they have been used.

If you would like to learn more about Crimson security, please click here.

Secure Data Centers

The Crimson application and your data are maintained on secure, redundant SAN’s that are virtualized in a high availability SSAE 16 Type 2 compliant data center. These top-tier data centers provide carrier-level support, including:

  • 24-hour manned security, including foot patrols and perimeter inspections
  • Biometric scanning for access
  • Dedicated concrete-walled data center rooms
  • Computing equipment in access-controlled steel cages
  • Video surveillance throughout facility and perimeter
  • Building engineered for local seismic, storm, and flood risks
  • Tracking of asset removal
  • Humidity and temperature control
  • Redundant (N+1) cooling system
  • Underground utility power feed
  • Redundant (N+1) CPS/UPS systems
  • Redundant power distribution units (PDUs)
  • Redundant (N+1) diesel generators with on-site diesel fuel storage
  • VESDA (very early smoke detection apparatus)
  • Dual-alarmed, dual-interlock, multi-zone, pre-action dry pipe water-based fire suppression
Biometric security at CMDI |

Physical Security at the CMDI

CMDI takes every effort to secure the physical premises of our office and caging facilities. These security standards include:

  • 24-hour manned security, including foot patrols and perimeter inspections
  • Separate biometric access control to enter caging facility and offices
  • Video surveillance throughout both the offices and caging facility
  • Dedicated mail intake room, opening and sorting room, document scanning room, and data entry room with their own biometric access and video surveillance
  • Tracking of asset removal