Skip to content

Industries

Churches & Nonprofits

Churches and nonprofits run on volunteers and small budgets, and they hold donor and family data that deserves the same protection as any business.

What makes this different

The problems specific to your sector

Not a generic list. These are the things that come up repeatedly in this kind of business.

  • Volunteers change constantly

    People help for a season and move on, often keeping access to systems long afterwards because nobody owns removing it.

  • Donor data is genuinely sensitive

    Giving records, family details and pastoral notes are exactly the kind of data a congregation expects to be handled carefully.

  • Budget is real

    Every dollar spent on IT is a dollar not spent on the mission, so the work has to be prioritised honestly.

  • Donation fraud targets congregations

    Emails impersonating the pastor asking members for gift cards are a persistent scam, and they work because the domain is not protected.

Compliance

What you are actually required to do

Named obligations rather than the word 'compliance'. If one of these does not apply to you, we will say so.

  • Donor data protection

    Not statutory for most churches, but expected by members and often required by grant funders.

  • Payment card handling

    PCI applies to online and in-person giving just as it does to retail.

Your software

We expect to find these

We work around your line-of-business software rather than asking you to change it, and we deal with the vendor when needed.

  • Planning Center
  • Church Community Builder
  • Tithe.ly
  • Breeze ChMS
  • Presentation software

Questions

Common questions

Is there discounted software for nonprofits?

Yes, and it is substantial. Microsoft 365 has a nonprofit programme with free and heavily discounted tiers. We will make sure you are on it rather than paying commercial rates.

Members get emails from our pastor asking for gift cards. Can that be stopped?

Largely, yes. Those messages usually forge your domain, and configuring SPF, DKIM and DMARC stops most of them from being delivered at all.

How do we manage volunteer access?

A simple documented process for granting and removing access, with a periodic review. It is not complicated, it just needs an owner.

Ready to secure your business?

A free assessment: we review your network, backups, Microsoft 365 settings and exposure, then hand you the findings in writing — whether or not you hire us.