Donation

This mapping was reviewed for General donation checkout. Only controls supported by the workflow, validation, evidence, reporting, or access restrictions on this route are listed.

FUND-01 — Truthful fundraising communicationsFUND-02 — Donor privacy and confidentialityFUND-03 — Gift acceptance and restricted giftsFUND-05 — Contribution acknowledgment and giver benefitsPRIV-02 — Privacy notice and consentF-22 — Confirm Stripe payment successF-23 — Do not store card data

FUND-01 — Truthful donation informationThe donor selects the fund, amount and frequency before payment. The page distinguishes checkout started from payment confirmed.Evidence: Approved campaign copy, target and change history.
FUND-02 — Donor privacy and recognition choiceIALFM retains contact information for payment, recordkeeping and receipts, while the donor can choose anonymous public recognition.Evidence: OTP/access log, privacy preference and disclosure record.
FUND-03 — Fund designationThe selected Operations, Zakat, Sadaqa, Youth or Construction fund is recorded with the donation and passed to the configured Stripe account.Evidence: Gift terms, restriction, due diligence and approval.
FUND-05 — Acknowledgment supportThe page states that no goods or services are provided in exchange, shows a confirmation after Stripe verification and directs the donor to receipt services.Evidence: Paid status, amount, fund, goods/services and receipt.
PRIV-02 — Privacy notice and consentSubmission requires acknowledgement of the Privacy Policy and explains the purpose of collecting donor contact information.Evidence: Notice version, consent, timestamp and withdrawal.
F-22 — Stripe confirmationThe portal counts the donation as paid only after Stripe confirms the payment or subscription status.Evidence: Stripe session, payment status and refresh audit
F-23 — Payment-card minimizationCard and wallet details are entered in Stripe; the portal does not store full card numbers, CVV or wallet credentials.Evidence: Stripe references; no full card number

Boundary of this page

Pledges and scheduled campaign payments are not created on this general donation page. They are managed through an active Fundraising campaign.

Open Fundraising Campaigns / Pledges

Framework basis: IRS contribution rules / ECFA benchmark / COSO; NIST Privacy Framework / applicable privacy obligations; COSO Principles 10, 13 & 16; IRS recordkeeping; COSO Principle 11; payment-data minimization practice

Donation

1 Donation categories

2 Amount

3 Frequency

Your donation

Or scan to pay

Thank you. Payment confirmed.