Security & privacy

FindAVSO helps veterans and their families find accredited help. Here is plainly what we hold, what we never do, and how we protect it.

What information we hold

• The directory. Every listing comes from the VA Office of General Counsel's public accreditation list. It is public information.
• What you choose to send us. If you join the founders list, we keep your email address, the name you give and whether you are a representative. If you test the beta, we keep your test answers and notes.
• Your email preferences. If you unsubscribe, we keep your address on a do-not-email list so you stay unsubscribed.

Searching the directory does not require an account, and we do not ask veterans for claim details or medical information.

What we never do

• We never sell or rent anyone's contact information.
• We never charge per lead or per click, and payment never changes search results.
• We do not run advertising or tracking scripts on this site.
• We never see or store card numbers. When listing payments open, checkout is handled by Stripe.

How we protect it

• Every page is served over an encrypted connection (HTTPS), and browsers are told to always use it.
• The database behind the site is not reachable from the internet. Only the site itself can read it, and no page shows the founders or beta lists.
• Forms are limited to a few submissions a minute to stop abuse.
• Unsubscribe links are signed, so no one can unsubscribe someone else.
• The site's code is kept in private repositories, and access keys are never stored in the code.

How we check our work

We test the site with an open-source security scanner and review the code before major releases. Last reviewed: October 29, 2026.

Report a security problem

If you think you have found a security issue, email support@findavso.com with “Security” in the subject. Please give us a reasonable chance to fix it before telling others. We will reply within two business days. Security researchers can also find our contact details in our security.txt file.

For how we handle personal information in full, see our Privacy Policy.