Compliance

Manna gives organizations tools that support their compliance work — collecting donor information at the point of contribution, keeping records of what was collected, and making that data exportable.

This page describes what the Platform does. It is not legal advice, and it is not a guarantee of compliance. Manna is a technology provider, not a compliance service, law firm, or accounting firm. Manna does not monitor contribution limits, verify donor eligibility, review page content, determine what must be reported, or file reports with any agency. Each Organization — through its treasurer or other responsible officer — remains solely responsible for its own compliance with all applicable campaign finance, tax, and disclosure laws. See our Terms of Service for the controlling allocation of responsibility.

1. Campaign Finance Compliance

FEC Donor Information Collection

For contributions to federal candidates, PACs, and party committees, the Federal Election Commission (FEC) requires that organizations collect and report specific donor information. Manna’s donation forms are designed to collect all required fields:

• Full legal name of the contributor
• Mailing address (street, city, state, ZIP code)
• Occupation and employer
• Contribution amount and date

New donation pages include these fields, and mark address, occupation, and employer as required, by default. Organizations can change which fields appear on their own pages. Because Organizations control their page configuration, Manna does not guarantee that any particular page collects any particular field, and Manna does not verify the accuracy of information a donor provides. Organizations are responsible for configuring their pages to collect the information their reporting obligations require.

Contribution Limits

Manna does not monitor or enforce contribution limits and cannot track contributions made through other platforms, by check, or through other channels. Organizations are solely responsible for monitoring and enforcing aggregate contribution limits and donor eligibility across all sources.

Contributor Eligibility

New donation pages include, by default, a contributor attestation confirming that:

• They are a U.S. citizen or lawfully admitted permanent resident.
• The contribution is made from their own personal funds.
• They are at least 18 years of age.
• They are not a federal contractor (for federal contributions).

Organizations control the attestation text on their own pages and may edit or remove it. Manna does not verify a contributor’s eligibility, citizenship, source of funds, age, or contractor status, and does not independently confirm any statement a donor makes. Organizations are solely responsible for determining whether a contribution is lawful and whether it may be accepted, retained, or must be refunded.

Reporting and Record-Keeping

Manna provides Organizations with exportable records of contributions processed through the Platform, including the donor information collected at the time of contribution. These exports are provided as a convenience to assist with record-keeping and are not a filing, a report, or a compliance determination.

Manna does not file reports on behalf of Organizations, does not determine what must be reported, and does not guarantee that an export contains every field or record required for any particular filing. Reporting requirements vary by jurisdiction, committee type, election, and reporting period, and may require information Manna does not collect — including contributions received outside the Platform. Organizations are responsible for reviewing and verifying exported data for accuracy and completeness before relying on it for any regulatory filing.

2. Payment Security

PCI DSS Compliance

All payment processing on Manna is handled through Stripe, a PCI DSS Level 1 certified payment processor. Manna never stores, processes, or transmits raw credit card numbers on our servers.

Sensitive payment data is entered into a secure form hosted by Stripe, encrypted, and transmitted directly to Stripe’s PCI-compliant infrastructure. Your donors’ card data never touches Manna’s servers.

Fraud Prevention

Card payments processed through the Platform are subject to the fraud-detection tools Stripe applies to transactions on its network, which may include address and security code verification and automated risk scoring. These controls are operated by Stripe, not by Manna, and are subject to change by Stripe.

Manna does not guarantee that any fraudulent, unauthorized, or unlawful contribution will be detected or prevented. Organizations remain responsible for reviewing the contributions they receive, for determining whether a contribution may lawfully be accepted or retained, and for any resulting refunds or chargebacks.

3. Data Protection

Encryption

All data transmitted between your browser and the Manna platform is encrypted using TLS (Transport Layer Security). Data stored in our databases is encrypted at rest by our infrastructure providers.

Access Controls

Manna implements role-based access controls at both the platform and organization level. Within each organization, distinct roles provide granular control over who can access sensitive data, manage finances, and administer settings. Database access rules restrict each organization’s members to that organization’s records.

Infrastructure Security

Manna is hosted on infrastructure providers that maintain SOC 2 Type II compliance. Our infrastructure includes:

• Automatic HTTPS enforcement across all endpoints
• Network-level protections provided by our hosting and database providers
• Database backups managed by our database provider

These protections are provided by our infrastructure vendors under their own terms and are subject to change. No system is completely secure, and Manna does not warrant that the Platform will be uninterrupted, error-free, or immune from unauthorized access.

4. State and Local Compliance

Campaign finance laws vary significantly by state and municipality. Manna’s donation forms allow Organizations to configure which donor fields are collected and to add their own disclaimer text. Manna does not tailor donation pages to any particular jurisdiction, does not determine which disclaimers a jurisdiction requires, and does not review page content for compliance. Organizations are responsible for understanding and complying with the specific laws that apply to them, including any required “paid for by” or similar disclaimers.

5. Nonprofit Compliance

For 501(c)(3) and 501(c)(4) organizations, Manna supports the collection of donor information needed for tax receipts and regulatory filings. Key considerations:

• 501(c)(3) donations may be tax-deductible. Organizations are responsible for issuing proper acknowledgment letters for contributions over $250.
• 501(c)(4) donations are generally not tax-deductible. Organizations should clearly communicate this to donors.
• Manna does not provide tax advice or determine deductibility.

6. Our Commitment

Manna is a nonpartisan platform. We provide equal access, tools, and support to all lawful organizations regardless of political affiliation, party, or ideology.

If you have questions about how Manna can support your organization’s compliance needs, please visit our Contact page.