Skip to content

Where your data lives

Four things are true about your data, and this page explains each of them.

Donor records are stored and processed in Canada.

This matters for a Canadian charity holding personal information about Canadian donors. It also means that when a board member asks whether donor data leaves the country, the answer is short.

One narrow exception exists, it is off by default, and it is described under how AI reads your notes.

Your records are separated from every other organization’s at the database level, not by a filter in the application.

The practical meaning: there is no query anyone can run, inside Relae or outside, that returns your rows to another organization. Isolation is enforced underneath the software rather than by the software remembering to check.

Relae does not sell, license or broker individual donor records or profiles.

This is worth stating plainly because the sector it sits next to does the opposite. Wealth screening vendors and list brokers trade in exactly this. Relae does not, and the line is absolute.

As more organizations use Relae, there is value in knowing which fundraising works. If that benchmark cooperative launches, it learns only from de-identified, aggregated patterns across many organizations, never from identifiable donors.

Data is encrypted in transit and at rest.

Credentials for connected channels are stored encrypted and are never displayed again after you save them. Relae only ever needs to read from a ticketing or payment platform, never to write.

These are the plain-language summaries. The governing documents are:

Where this page and a document differ, the document governs. Your workspace also keeps a record of exactly what your organization has agreed to and when.