Not For Profit
Cyber security and IT support for charities that fits your budget. Cyber Essentials, Microsoft 365 lockdown and practical training that protect donor trust and keep spending on the mission.
Service Details
Cyber security and IT support for charities should protect your donors, beneficiaries and reputation without taking money from the mission. You get the basics done properly, sized to your budget and built around staff and volunteers who come and go. Free and built-in controls come first, and paid tools only where they earn their place.
We work with UK charities, foundations and community organisations. Our engineers secure your email, files, donation systems and devices, and our governance specialists help you evidence UK GDPR and Cyber Essentials in the way funders and trustees expect. See how we support other sectors on our industries page.
INFO
Donors trust you with their money and their data. You get sensible, affordable protection, volunteers included, so one incident never costs you that trust.
What charities worry about
Small teams, big responsibilities. Your risks look like this:
Budgets that must go to the mission
Every pound on IT is a pound not spent on your cause. You get tiered, right-sized measures, with free and low-cost controls first and paid ones only where they earn their place.
Donor and beneficiary data
Donation platforms, CRMs and case files hold payment details and records about vulnerable people. You secure them properly, because a breach here costs donations and goodwill as well as regulatory attention.
Duties you cannot dodge
UK GDPR applies whatever your size, trustees are responsible for managing risk and funders increasingly ask for Cyber Essentials. You meet all three with proportionate evidence, not enterprise paperwork you cannot staff.
Cover the essentials, affordably
Most attacks on charities are not sophisticated. They are phishing emails, reused passwords and unpatched laptops. Here is what you put in place first, and how you keep it working as people change.
From first steps to steady habits
Protect first
- Cyber Essentials certification
- Multi-factor authentication on email, CRM and finance
- Microsoft 365 or Google Workspace lockdown
- Backups that actually restore
- Donation platform and website checks
Sustain it
- Volunteer-friendly security training
- Joiner and leaver process for rotating staff
- Simple incident plan with named owners
- UK GDPR basics: retention and consent
- Grant-friendly project scoping
Each of these maps to a service you can read about: Cyber Essentials, Microsoft 365 security, Google Workspace security, identity and access management, endpoint management and user awareness training. If you would rather hand day-to-day IT over entirely, see our managed services.
Funders, regulators and donors ask. You answer.
The rules that apply to UK charities, and what each one expects from you:
Cyber Essentials
The government-backed certificate that proves the basics are covered and that many funders and contracts ask for.
UK GDPR
Consent, retention and breach reporting to the Information Commissioner's Office, sized for how charities actually work.
Charity Commission
Trustees are expected to manage risk and report serious incidents, including significant data breaches and cyber crime.
PCI DSS and fundraising
Card donations handled through compliant payment providers, and donor data used in line with the Fundraising Regulator's Code of Fundraising Practice.
Read more on Cyber Essentials certification, UK GDPR support and PCI DSS compliance. For help explaining risk to your trustees, see our board advisory service.
Solutions for charities
Our solutions flex around charity realities: volunteer turnover, shared devices and donated licences. Whether you need Cyber Essentials certification for a funding bid, a Microsoft 365 tidy-up that locks down data without locking out volunteers, UK GDPR-aligned processes or awareness training people actually attend, you pay for what fits.
Compliance Programme
Cyber Essentials and UK GDPR evidenced in ways funders and trustees recognise.Digital Workplace
Microsoft 365 and Google Workspace secured for staff and volunteer turnover.Secure Cloud Environments
Donor CRM and casework systems hosted and backed up properly.Strategic Advisory
Fractional leadership when you need direction but cannot hire it.
How an engagement runs
We start with what you already have: your licences, devices, systems and the people who use them. Then we close the biggest gaps with the cheapest controls that work, and leave you with simple habits and evidence your trustees and funders can see.
Review
What you have and where the gaps are
Protect
Free and low-cost controls switched on first
Evidence
Proof ready for funders and trustees
Charity shops and online stores face many of the same card payment risks covered on our retail page. If your charity manages property or investments, see how we support real estate and financial services organisations. All of our framework work sits within our governance services.
Frequently asked questions
Protect donor trust without draining the budget
Whether a funder has asked for Cyber Essentials, your volunteers share devices or you simply want the basics done properly, tell us where you stand. You get a plan sized to your charity, with free and low-cost controls first.