Trust and compliance

Conformance status: We target WCAG 2.1 Level AA conformance across all MemberLoop interfaces: member portal, admin dashboard and marketing site.

Technical approach: All pages include skip-navigation links, proper heading structure, ARIA labels on interactive elements, keyboard-navigable flows, and support for prefers-reduced-motion.

Known limitations: Some third-party embed components (e.g., Stripe Connect onboarding) may have accessibility limitations we cannot control. We document these and are working with vendors to resolve them.

Testing: Every change is checked automatically against WCAG 2.1 AA on phone and desktop screens, in light and dark mode, and our tests confirm that menus, dialogs and reordering work from the keyboard. We fix reported barriers as a priority.

Feedback: If you encounter an accessibility barrier, email info@memberloop.ca. We respond within 2 business days and provide alternate access to content if a barrier cannot be immediately resolved.

Encryption: Data travels over encrypted HTTPS connections. Our hosting and database providers encrypt stored data.

Authentication: Members sign in with a single-use email link or their association's own login (SSO), so they have no MemberLoop password. Admin and staff passwords are stored only as salted scrypt hashes, never in readable form.

Network: All traffic is served over HTTPS. Session cookies are HTTP-only and marked secure.

Payments: All payment data is handled by Stripe (PCI Level 1). We never touch card numbers.

Subprocessors: Full list available on request. Main service providers: Stripe (payouts and dues payments), Awin, Impact and PartnerStack (affiliate tracking), and providers for hosting, database, file storage, email delivery, scheduled tasks and error reports.

Vulnerability disclosure: If you discover a security vulnerability, email info@memberloop.ca. We respond within 24 hours and credit responsible disclosures.