We are a community foundation on BBNC and have a security question that may not be an issue for educational facilities. When a new user accesses BBNC, they request a username and password, enter their mailing info and send it away. We then connect them to an RE constituent. With that connection, they have access to all kinds of personal information. What is stopping someone from pretending to be someone else and accessing their data? We don't store any personal data, no SS numbers or account numbers of any kind.