Not sure about their financials, but they're pretty transparent overall. Some of their internal policies (linked from that support page) are in their git repo https://gitorious.org/conservancy/policies and their list of services seems pretty clear: http://sfconservancy.org/members/services/