Help trustees, leadership and internal teams protect information, strengthen assurance and make practical technology decisions. Cloud Agile offers consultancy, cyber security and scoped co-managed support for charities and non-profits.
Issues that commonly arise for organisations in this sector. The assessment always follows your actual environment.
Shared logins, a legacy CRM, a mix of personal and donated devices and a file server nobody wants to touch. It works until someone leaves, and then knowledge leaves with them.
High turnover with no consistent joiner and leaver process means dormant accounts, orphaned mailboxes and access that was never removed.
Spreadsheets of supporter and service-user records held on individual laptops create real GDPR exposure and make subject access requests painful.
Funders and commissioning bodies increasingly ask about data protection, cyber controls and business continuity as part of the application, not as an afterthought.
Many charities pay commercial prices for software they are eligible to receive at a heavy discount, or are already entitled to free of charge.
One senior team covering support, infrastructure, security, governance and AI, so nothing falls between suppliers.
Fully managed support where there is no internal IT, or co-managed cover alongside a digital lead or IT-minded volunteer. Predictable per-user pricing so budgets survive changes in headcount and funded-post cycles. Explore our business IT support services.
We help you claim and apply the non-profit grants and discounts you are entitled to, then configure Microsoft 365, SharePoint and Teams so files, cases and campaigns live in the right place rather than on personal drives. Explore our cloud and infrastructure services.
Where mail and files still sit on an old platform, a shared drive or a tenant somebody else controls, we run the move as a defined project with the scope, permissions and cutover agreed before anything changes. Explore our Microsoft 365 migration services.
Multi-factor authentication, Conditional Access, email protection and endpoint security. Charities are targeted precisely because attackers expect weak controls and fast-moving payment processes. Explore our managed cyber security services.
Cyber Essentials certification, data protection documentation and a risk register trustees can actually read, so technology assurance stops being a scramble before every board meeting. Explore our governance, risk and compliance services.
Charities hold some of the most sensitive personal data in the country and are accountable to trustees, funders, the Charity Commission and the ICO. The controls below are the ones that come up most often.
Lawful basis for supporter and beneficiary data, retention that is actually applied, and a workable process for subject access requests.
Increasingly expected by funders and local authority commissioners. We prepare the estate, remediate the gaps and support you through certification.
Trustees are responsible for protecting charity assets, including data and finances. We provide the reporting that lets them demonstrate oversight.
Charities are heavily targeted by invoice and CEO fraud. Email authentication, impersonation protection and clear payment verification steps close the common routes in.
Where you hold safeguarding records, access needs to be restricted, logged and reviewable rather than sitting in a shared folder.
Immutable, encrypted backup of Microsoft 365 email, files and Teams with retention set to seven years or longer where needed, so grant records, financial accounts and trustee correspondence can still be produced for funders, auditors or the Charity Commission years later. Restores are tested, not assumed.
Funders, auditors and the Charity Commission all expect records to still be available years later. This is how we typically configure backup retention for a charity.
| Record type | Typical retention | Why |
|---|---|---|
| Financial accounts and Gift Aid records | 7 years | HMRC and independent examiners expect accounting and Gift Aid evidence to be produced on request. |
| Grant and funder records | 7 years from grant close | Funders routinely reserve audit rights for several years after a grant is spent and reported. |
| Safeguarding records | Beyond 7 years, per your safeguarding policyBeyond 7 years | Safeguarding material may be needed for later inquiries and is held well past the standard period. |
| Trustee minutes and governing documents | PermanentBeyond 7 years | Governance records form the charity's permanent record and are never routinely destroyed. |
| Microsoft 365 email, files and Teams | 7 years | Trustee and funder correspondence is retained in immutable, encrypted backup. |
Retention is set to your own policy, not a provider default, and restores are tested rather than assumed. Periods above are typical UK reference points, not legal advice. Your approved policy must also meet any mandatory legal, regulatory or contractual requirements that apply. Talk to us about your retention requirements.
A short conversation covering how you are set up today, what is causing pain, funder or commissioner requirements and any deadlines. No charge, no obligation.
We document devices, accounts, licences, backups and security posture, and identify non-profit licensing you should be claiming. You get the findings whether or not you proceed.
A costed plan separating the urgent risks from the improvements that can wait for the next funding round, with pricing tailored for registered charities.
Monitoring agents, documentation, security baselines and account tidy-up delivered around your service hours, typically over two to four weeks with no interruption to frontline work.
Day-to-day support plus regular reviews, with reporting written in language trustees and funders understand.
Both models are priced the same way per user. The difference is how much you keep in-house.
For charities with no internal IT. We become your IT department end to end.
For charities with a digital lead, operations manager or IT-savvy volunteer who needs backup rather than replacement.
Charities have the clearest AI use cases we see, because so much time goes into writing, reporting and repetitive administration. We only recommend use cases where the data handling is defensible.
Copilot working from your own approved impact data and previous applications to produce a first draft, cutting hours off each submission while a human keeps editorial control.
Automated collation of service data into a consistent monthly or quarterly report, so the same figures are not rebuilt by hand every cycle.
Power Automate flows handling onboarding checklists, reminder emails, DBS expiry tracking and referral acknowledgements.
Clear rules on what may never be pasted into an AI tool, particularly beneficiary and safeguarding information, plus training so staff and volunteers understand the boundary.
More detail on how we approach this is on our AI consultancy and automation services page.
Our standard managed support is priced per user per month: Agile Core at £45 per user and Agile Fortify at £75 per user, with servers and network devices charged separately. Consultancy and project work is £120 per hour.
Registered charities and non-profit organisations are quoted separately, with scope and commercial terms agreed. We look at your funding position, how many of your users are part-time or volunteers, and which non-profit licensing grants you qualify for, then build a package that fits the budget you actually have.
Registered charities and non-profit organisations are quoted separately rather than at standard commercial rates. Tell us your charity number on the discovery call and we will build a package around your funding position, your volunteer to staff ratio and the non-profit licensing grants you qualify for.
AI can help small teams with drafting, reporting and finding information. We help agree what beneficiary, donor and safeguarding information may be used, configure appropriate controls and keep a person reviewing outputs. Decisions about beneficiaries stay with your trustees and staff.
Explore AI consultancyDiscuss your technology risk, assurance requirement or internal IT priorities with Cloud Agile.