Industry guide

Managed IT diligence for nonprofits.

Organizations hold donor lists, donation card payments, grant records, and often client-service data as sensitive as any business holds. A nonprofit's asset is trust, a donor-data breach spends it, and grant funders increasingly ask about security posture directly. Lean budgets make the stripped quote tempting and the all-in comparison essential.

What binds you

The frameworks

PCI DSSThe frameworkCard-security obligations on donation processing.
Funder and audit requirementsThe frameworkSecurity representations grant agreements increasingly require.

The industry question

What does the all-in number look like against my actual grant-funded budget cycle?

It belongs on the checklist, in writing, next to the other 18.

The method

The bench, applied

Observe

The tactics

Lock-in contracts, stripped quotes, and exit traps, documented in the industry's own words with checkable sources.

See the tacticsAdapt

The standard

Fourteen marks of a fair managed IT agreement, stated plainly and provider-neutral.

See the standardProtect

The benchmark

The four-step method and the 18 questions to ask in writing, with a printable checklist.

Use the benchmark

Your state

Nonprofits, state by state

The same diligence with your state's verification layer: the breach statute, the entity search, the regulator.

Choose your state

Educational reference, not legal advice. Frameworks are summarized at the framework level; confirm specifics for your situation with counsel or the primary source.