IT for Virginia Nonprofits on a Budget

Updated October 22, 2026

Nonprofits are asked to run like businesses on a fraction of the budget. IT often falls to whoever on staff is “good with computers,” and the setup grows piece by piece: a free email account here, a donated laptop there. That works until something breaks, a donor database is exposed, or a departed volunteer still has the keys.

Make use of nonprofit pricing

Many major technology companies offer free or discounted products to eligible 501(c)(3) organizations. Eligibility rules and offers change, so verify current terms with each provider.

• Google for Nonprofits has offered a no-cost edition of Google Workspace, with discounted upgrades.
• Microsoft offers nonprofit pricing on Microsoft 365. Its nonprofit grant offers changed in 2025, so check Microsoft’s current nonprofit page rather than relying on older articles.
• TechSoup brokers discounted software and hardware from many vendors for verified nonprofits.
• Many CRM and donor-management platforms have nonprofit editions or discounts.

Choose one platform for email and documents and stick with it. Running half the organization on Google and half on Microsoft creates confusion and security gaps.

Protect donor and client information

Donor records, payment information, and, for service organizations, information about the people you serve (sometimes including health, immigration, or financial details) deserve real protection.

• Use a proper donor CRM instead of spreadsheets passed around by email.
• Don’t store card numbers yourself. Let your payment processor handle them.
• Limit access to sensitive records to people who need them.
• Encrypt laptops, especially ones that leave the office.
• Know your obligations. Nonprofits are exempt from the Virginia Consumer Data Protection Act, but Virginia’s breach notification law still applies. See Virginia data privacy and breach laws.

Volunteers, board members, and turnover

Nonprofits have more people coming and going than most businesses.

• Give volunteers and board members organizational accounts for organizational work, rather than letting donor or client data flow through personal email.
• Use groups and shared mailboxes (like info@ or volunteers@) so work doesn’t live in one person’s inbox.
• Remove access promptly when people leave. Our offboarding checklist applies to volunteers too.
• Keep the keys yourself. The organization, not a volunteer or former board member, should control the domain name, the website, social media accounts, and the admin login for email.

Fraud aimed at nonprofits

Nonprofits are frequent targets of:

• Gift card scams: an “urgent” email that appears to come from the executive director asking someone to buy gift cards.
• Payment redirection: fake vendor or grantee emails with new bank details.
• Fake donations: overpayments followed by refund requests.

A simple rule that nobody buys gift cards or changes payment details based on an email alone stops most of these. See how to spot phishing emails.

A baseline for a small nonprofit

1. One email and document platform, using nonprofit pricing, with MFA on every account.
2. Organization-owned accounts for staff, and for volunteers who handle sensitive data.
3. A donor CRM, with access limited by role.
4. Backups of email, documents, and the CRM.
5. A written list of who controls the domain, website, social media, and bank access, with at least two trusted people able to get in.
6. A process for removing access when anyone leaves.

Getting help affordably

• Ask IT providers whether they offer nonprofit rates.
• Look for a board member or skilled volunteer to oversee technology decisions, even if a provider does the work.
• Budget for IT as an operating cost that grant applications can include, rather than an afterthought.