Who we work with · Nonprofits

More of the budget for the mission.

The same standard every client gets, through a program for registered nonprofits. Tell us about your organization and we’ll explain how it works for you.

Ask about the nonprofit program Run the IT Risk Check

Nonprofit program · 501(c)(3)

A community hall with a folding table, a closed laptop and a clipboard, folding chairs stacked by the wall, and one orange extension cord to a wall socket.

What’s different here

Donors, volunteers and a board, on the same systems.

A nonprofit carries every risk an office does, and a few of its own.

Donor and client records

Names, addresses and giving history, and sometimes case notes far more sensitive than that.

People who come and go

Staff, volunteers and board members, each with the access they need, removed the day they leave.

Email in the director’s name

A fake request for payment, in a name your staff trust. Your domain set up so nobody else can send from it.

Microsoft’s nonprofit offers

A Microsoft 365 grant and nonprofit prices for eligible organizations, if someone applies and sets it up.

The nonprofit program

One program, with its terms written on the quote.

Organizations with 501(c)(3) status qualify. We confirm your status with the IRS before we quote, and the program terms are written on the quote.

Choose Nonprofit program on the form below, or mention it when you book a review.

Microsoft 365 for nonprofits

Know what Microsoft offers before you buy.

Microsoft gives eligible nonprofits Microsoft 365 Business Basic free for up to 300 users, and sells Business Premium at a nonprofit price. We’ll go through which of them fit your organization on the call.

Sources: Microsoft, nonprofit plans and pricing; Microsoft, nonprofit eligibility. Checked 29 September 2026.

What we set up

Built into the Secured plan, and documented.

The same list every client gets. Nothing is held back for the program.

Everyone signs in as themselves, staff, volunteers and board alike.
Multi-factor authentication on email and remote access.
Offboarding within four business hours, the day someone leaves.
Email authentication so nobody else can send from your domain.
Encryption on laptops, phones and backups.
Backups restore-tested monthly, with the file, the time and who opened it.
A separate network for guests and the public.
A monthly report you can hand to your board.

Check it yourself first

Two checks, no email required.

8 questions · 90 secondsIT Risk Check Covered, assumed or exposed, across the eight controls that decide how a bad day goes. It will tell you if you’re fine.Run the check 10 secondsEmail security check SPF, DKIM and DMARC for any domain, read from public DNS, with what each finding means in plain English.Check a domain

Questions

Straight answers.

Who qualifies for the program?

Organizations with 501(c)(3) status. We confirm it with the IRS before we quote.

What does the program change?

Your quote. The program terms are written on it, and we’ll walk you through them on the call.

Do volunteers need their own accounts?

Anyone who touches donor or client records does. With a shared login you can’t tell who did what, or remove someone who has left.