Charity risk register checker

Use this before trustees approve a risk register, annual-report risk wording, insurance renewal evidence, cyber review, reserves review, supplier changes, or service planning papers. The checker follows Charity Commission CC26 themes and the risk register template idea, but it is not legal advice, insurance advice, audit advice, safeguarding advice, investment advice, governance advice, or a regulator filing check.

Risk contexts6Small charities, safeguarding services, grant or contract funding, fundraising exposure, digital risk, property, and trading contexts.

Evidence checks10Weighted around owners, categories, impact, controls, response strategy, escalation, continuity, annual reporting, and review cadence.

Official sourceCC26Links point to Charity Commission risk management guidance for England and Wales.

Data entryLocal onlyInputs run in the browser and are not submitted.

Official sources to check

Charities and risk management (CC26) is the Charity Commission starting point for charity risk management guidance in England and Wales.
Charities and risk management (CC26) detailed guidance explains major risks, risk areas, risk responses, annual-report statements, and the risk register template approach.

Related trustee tools

Charity reserves policy checker for linking risk, reserves, forecasts, and annual-report wording.
Charity cybersecurity budget calculator for turning cyber and data risks into budget and control evidence.
Charity data protection readiness checker for data-risk evidence before AI, CRM, fundraising, or supplier changes.

What this checker should prevent

Leaving trustees with a generic risk template that does not identify the charity's major risks, owners, controls, and review route.
Drafting annual-report risk wording separately from the current register, trustee minutes, and control evidence.
Keeping cyber, data, supplier, safeguarding, funding, or continuity risks outside the register because they sit with different staff.
Accepting high-impact risks without trustee sign-off, risk appetite evidence, escalation triggers, and a mitigation plan.

Password manager and access security

1Password for Non-Profits

1Password offers special pricing and support routes for nonprofit teams that need to protect passwords, passkeys, account logins, files, notes, and contacts.

Official nonprofit page verified; exact support and discount level depend on application review2026-06-22

Identity, access, cybersecurity

Okta for Nonprofits

Okta for Good offers eligible nonprofits 50 free Workforce Identity licences, 50% off additional licences and selected advanced solutions, and 50% off Auth0 plans.

Official Okta for Good nonprofit page rechecked; free products, licence quantities, discounts, validation route, and exclusions verified2026-08-12

Cybersecurity and resilience

Cloudflare Project Galileo

Cloudflare provides free cybersecurity services to qualifying public-interest organizations.

Official program page verified2026-06-21

Business VPN, zero trust access, threat prevention, password management, endpoint security

NordLayer NGO cybersecurity discount

NordLayer's official NGO pages advertise an NGO cybersecurity route with an exclusive discount on subscription plans, while the terms describe a tiered annual-plan discount up to 60%.

Official NordLayer nonprofit, NGO contact, and NGO terms pages verified; headline discount is tiered and first-term only2026-06-22

Data infrastructure, security analytics, observability training

Splunk Product and Training Donation Program

Splunk's official donation page says it provides nonprofit, academic, and research organizations with free software licenses and training to help bridge the data divide.

Official Splunk Product and Training Donation Program page verified; eligibility and no-cost scope preserved2026-06-22

Microsoft 365, Azure, Dynamics, security

Microsoft for Nonprofits

Microsoft publishes nonprofit grants and discounts including Microsoft 365 Business Basic free for up to 300 users, annual Azure credits, and discounted business applications.

Official nonprofit offers page rechecked2026-08-12

Microsoft 365, Teams, email, security

Microsoft 365 nonprofit discount

Microsoft's official nonprofit pricing page lists Microsoft 365 Business Basic as a grant free for up to 300 users, Business Standard at USD 3.00 per user monthly, and Business Premium at USD 5.50 per user monthly when paid yearly.

Official Microsoft 365 nonprofit pricing rechecked2026-08-12

Email, documents, meetings, shared storage

Google Workspace for Nonprofits

Google's official Workspace nonprofit page lists Google Workspace for Nonprofits at USD 0 per user per month and discounted Business and Enterprise nonprofit offers.

Official Google Workspace for Nonprofits page verified2026-06-22

Secure content management and collaboration

Box.org

Box.org states that nonprofits receive the first 10 licenses free on the Starter plan, with discounted pricing on other plans and add-on services.

Official Box.org page verified2026-06-21

E-signatures, agreements, contract workflow

Docusign for Nonprofits

Docusign has an official nonprofit industry page for modernising agreements, automating processes, and digitising nonprofit documents.

Official nonprofit industry page verified; fixed discount not quoted2026-06-21

Document automation, proposals, contracts, eSignatures, payments

PandaDoc for Nonprofits

PandaDoc offers a general Free eSign plan. Its current comparison lists five documents per month for current Free accounts and distinguishes older 60-document annual accounts. Confirm charity-specific pricing with sales rather than assuming a published discount.

Official nonprofit and plan pages checked on 12 October 2026; charity-specific pricing needs confirmation2026-10-12

Accounting, finance, payroll, VAT

Xero for nonprofits

Xero's UK non-profit page says registered not-for-profit organisations on a business pricing plan can get 25% off Xero.

Official Xero UK non-profit page verified2026-06-22