Net Gain: Playing It Safe

By having a way for donors to enter their information and submit it directly to the payment-processing company, you prevent your organization from obtaining the sensitive information in the first place.

Allow only authorized personnel to deal with monetary transactions.
If your organization has the opportunity to be in contact or possession of donors’ credit or bank account information, ensure that the information and transactions are handled only by authorized personnel.