Subsplash
Security and trust center evidence
The Subsplash Platform equips churches with the best mobile apps, church management software, websites, online giving, and more to engage
Summary
Subsplash has 2 registry-verified rows and 2 vendor-stated rows in the CertReports index, last verified 26 Oct 2026. The strongest row is GDPR: Vendor states GDPR on its trust centre. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 30 Sep 2026, Subsplash states on its trust centre that it addresses GDPR requirements. As of 26 Oct 2026, Subsplash is listed in the Visa Global Registry as PCI DSS validated, with the current certification period running through 31 May 2027 and the assessment performed by MegaplanIT Holdings LLC. As of 26 Oct 2026, Subsplash is listed in the EU-US Data Privacy Framework registry as active across the EU-US, UK Extension, and Swiss-US certifications, a status issued 8 Mar 2018 and set to expire 9 Feb 2027. As of 30 Sep 2026, Subsplash states on its trust centre that it addresses CCPA / CPRA requirements. No SOC 2 evidence was found for Subsplash as of 26 Oct 2026.
- PCI DSS: listed in Visa Global Registry, validated through 31 May 2027 (as of 26 Oct 2026)
- EU-US Data Privacy Framework: listed as active, expires 9 Feb 2027 (as of 26 Oct 2026)
- GDPR and CCPA / CPRA: vendor states on its trust centre (as of 30 Sep 2026)
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 27 Oct 2026; it is regenerated whenever a row changes.
Among nonprofit and fundraising vendors
2verified rows
Category median 1, across 31 indexed nonprofit and fundraising vendors. Subsplash has more verified rows than 90 percent of them.
church managementdonor managementmobile appsonline giving
Compare with similar vendors
Pick your own comparisonCompliance grid
GDPRVendor-statedVendor states GDPR on its trust centre
as of 30 Sep 20262 sources
PCI DSSVerifiedListed on the Visa Global Registry as PCI DSS validated through 2027-05-31
as of 26 Oct 20262 sources · MegaplanIT Holdings LLC
EU-US Data Privacy FrameworkVerifiedActive: EU-US Certification, UK Extension Certification, SW-US Certification
as of 26 Oct 20261 source
CCPA / CPRAVendor-statedVendor states CCPA on its trust centre
as of 30 Sep 20262 sources
Legal artefacts
Subprocessors (13)
Amazon Web ServicesHosting, storage and processing Customer Data · USA- HUHubspotCRM Integration · USA
IntercomSupport and account management · USA- LOLoomSupport Recordings · USA
- MOMongoDBDatabase Hosting · USA
- OUOutreachCustomer Communication Tool · USA
PendoData analytics · USA- SASalesforceSupport and account management · USA
Sentry (Functional Software, Inc. d/b/a Sentry)Application Monitoring · USA- SLSlackCustomer Support and Internal Communication · USA
SnowflakeData warehouse services · USA
StripePayment processing · USA- TATableauData Visualization Platform · USA
Change history
- 26 Oct 2026PCI DSS auditor changedAuditor changed from A-LIGN Compliance and Security, Inc., dba A-LIGN to MegaplanIT Holdings LLC.
- 12 Oct 2026PCI DSS renewedExpiry moved from 2026-10-31 to 2027-10-31.
- 18 Sep 2026Subprocessor added: Amazon Web ServicesAmazon Web Services appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: HubspotHubspot appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: IntercomIntercom appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: LoomLoom appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: MongoDBMongoDB appeared on the subprocessor list.
- 18 Sep 2026Subprocessor added: OutreachOutreach appeared on the subprocessor list.
- 18 Sep 2026CCPA / CPRA evidence addedA CCPA / CPRA row entered the index with state Vendor-stated.
- 18 Sep 2026Subprocessor added: SalesforceSalesforce appeared on the subprocessor list.
Similar vendors with evidence
Related by product tags and the Nonprofit and fundraising category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
Church Community Builder
Analytics
See why 14,000+ churches run on Pushpay - the church engagement platform for giving, custom apps, analytics, and live
Jios Apps
Finance and accounting
Manage people, groups, events, volunteers, giving, accounting, and communications with all-in-one church management
Givelify
Nonprofit and fundraising
Givelify is the leader in mobile and online giving for churches and
Breeze Church Management Software
DevOps and observability
Breeze is an easy-to-use church management software that helps you organize data, manage events, offer online giving, track attendance, and
Evidence against regulations
All regulations for SubsplashHow much of each regulation’s vendor requirements Subsplash’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read