Blackbaud
Security and trust center evidence
Summary
Blackbaud has 3 registry-verified rows in the CertReports index, last verified 17 Sep 2026. The strongest row is PCI DSS: Listed on the Visa Global Registry as PCI DSS validated through 2027-06-30. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 2026-09-17, Blackbaud is listed in the Visa Global Registry as PCI DSS validated, with that listing valid through 2027-07-31 and the assessment attributed to Schellman Compliance, LLC. As of 2026-09-17, Blackbaud is listed in the CSA STAR registry at Level 1 (self-assessment/CAIQ) with a Trusted Cloud Provider designation, effective since 2019-10-09. As of 2026-09-17, Blackbaud is listed in the EU-US Data Privacy Framework registry as holding active EU-US, SW-US, and UK Extension certifications, with the current certification period running to 2027-01-09. As of 2026-09-17, no public evidence found for a SOC 2 Type II report or a HIPAA BAA for Blackbaud. As of 2026-09-17, no subprocessor records were found in the evidence provided for Blackbaud.
- PCI DSS: listed in Visa Global Registry as validated through 2027-07-31, auditor Schellman Compliance, LLC. (as of 2026-09-17)
- CSA STAR: listed in CSA STAR registry at Level 1 self-assessment (CAIQ), Trusted Cloud Provider, since 2019-10-09 (as of 2026-09-17)
- EU-US Data Privacy Framework: listed in DPF registry with active EU-US, SW-US, and UK Extension certifications through 2027-01-09 (as of 2026-09-17)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 17 Sep 2026; it is regenerated whenever a row changes.
Among nonprofit and fundraising vendors
3verified rows
Category median 1, across 32 indexed nonprofit and fundraising vendors. Blackbaud has more verified rows than 100 percent of them.
cloud softwaredonor managementfundraisingnonprofit crm
Compare with similar vendors
Pick your own comparisonCompliance grid
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-06-30
as of 17 Sep 20261 source · Schellman Compliance, LLC.
CSA STARVerifiedSTAR Level 1 self-assessment (CAIQ), Trusted Cloud Provider
as of 17 Sep 20261 source
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, SW-US Certification, UK Extension Certification
as of 17 Sep 20261 source
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this.
Subprocessors
No subprocessor list captured yet.
Similar vendors with evidence
Related by product tags and the Nonprofit and fundraising category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
