Controls to define before work begins
Data categoriesIdentify what information is actually needed for the work and avoid unnecessary access.
Access methodUse organization-approved accounts, permissions and storage locations wherever available.
Payment boundaryDonation processing remains with the nonprofit's chosen payment/fundraising platform.
Consent & communication rulesYour organization defines the lawful basis, preferences and policies that govern outreach.
Accessibility requirementFor web work, agree the accessibility standard or testing scope before implementation.
Jurisdiction & policy reviewLocal legal or regulatory requirements should be validated by the nonprofit's qualified advisers.