Security
Last updated: October 28, 2026
Generous helps you give gifts to the people you care about, so you trust us with your account and your payments. We take that seriously.
Hosting and infrastructure
Generous's application is hosted on Heroku and Vercel, industry-leading SOC 2 Type 2 and ISO 27001-compliant infrastructure providers.
Signing in
You sign in with Google or a one-time code emailed to you, and codes expire quickly.
Data security
All data is encrypted in transit and at rest.
Payment security
Payments are processed by Stripe, a PCI Level 1 certified service provider, and card numbers never touch Generous servers.
Access control
Access to production systems and customer data is limited to the people who need it to run Generous.
Reporting a vulnerability
If you think you have found a security problem, email support@meetgenerous.com with the subject line "Security report."
Certifications and testing
Generous follows all SOC 2 guidelines but is not yet SOC 2 certified. When that changes, we will say so on this page.