Menu
No data was found
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Whether you’re a one-person operation or a growing business with a full team, we’re here to help. Get in touch and let’s talk about what we can do for you.
Secure, auditable IT on a charity budget, starting with what you can get for nothing.
Charities carry an unusual combination: data that can be more sensitive than a hospital’s, accountability to funders, trustees and the Charity Commission, and a budget where every pound spent on IT is a pound not spent on the work. This page is about meeting the first two without wasting the third, and it starts with the licensing and grant funding you may already be entitled to and not claiming.
The data is more sensitive than people assume. Everyone thinks about donor records. The far more serious data set is usually beneficiaries: safeguarding notes, health information, financial hardship, immigration status, domestic abuse referrals. For some charities, a breach isn’t an embarrassment, it’s a risk to someone’s physical safety. That raises the bar well above ordinary commercial practice.
Your workforce turns over constantly. Six staff and sixty volunteers is a normal shape for a charity and an unusual one for IT. Accounts get created quickly and closed slowly or never, logins get shared because it’s easier, and people use their own devices. Nobody is being careless, there just isn’t a process.
Everyone wants evidence and nobody funds it. Grant applications ask about data protection. Funders run due diligence. Trustees are accountable for risk. Meanwhile IT is a cost line that feels like it competes with delivery, so it gets deferred until something forces it.
You work in a regulated space with sensitive data, limited money and a volunteer workforce. All three have to be solved together or none of them are.
Charities are targeted, and not gently. Fraudsters use the fact that charities are trusting by culture and often have weak separation between the person who requests a payment and the person who makes it. Attackers also know that a charity’s reputation is its fundraising capacity, which makes the pressure after an incident unusually acute.
Meanwhile the manual workarounds that keep things moving on a tight budget are exactly what fail under scrutiny. A shared spreadsheet, a volunteer’s personal laptop, a login three people use. All manageable until a subject access request, a funder’s questionnaire or an incident puts them under a spotlight.
The remedies are not expensive, and for charities a meaningful part of them is free or heavily discounted. Proper accounts for every person, multi-factor authentication, access that matches roles, protected devices, tested backup, and a record of it. That protects your beneficiaries, answers your funders, and gives your trustees something concrete when they ask about cyber risk.
Microsoft offers grant and heavily discounted licensing to eligible charities, and the terms change periodically. Before we quote you anything, we’ll check what your charity actually qualifies for now. Sometimes it changes what we’d recommend you buy from us, and occasionally it means you need less from us than you thought.
Individual accounts, enforced multi-factor authentication, permissions that match roles rather than goodwill, encryption and tested backup. Particularly important where safeguarding or special category data is involved.
A process for people joining and leaving that works at volunteer turnover rates, so access ends when someone stops volunteering rather than whenever somebody remembers.
Two minutes, a handful of questions, covering the ground funders and trustees ask about. Useful whether or not you ever speak to us.
Every one of our packages has not-for-profit pricing, and the difference is meaningful rather than token. You can see the current rates on the package pages.
Which package depends on your Microsoft position. Essential includes a Microsoft 365 Business Premium licence, which is excellent value for a commercial business. If your charity qualifies for grant or discounted licensing directly from Microsoft, you may already have that covered, in which case Starter plus unlimited support and device protection is the better buy and we’ll say so. That’s a conversation worth having before anyone quotes you, including us.
Where you hold safeguarding or special category beneficiary data, or where a funder or commissioner has asked about certification, we’d point you at Professional. The strongest security stack plus Cyber Essentials, which answers a large part of most funder due diligence questionnaires in one go.
The Essential IT Support Service brings together everything most businesses need in a single monthly price. IT support and device security as the foundation, layered with complete cloud and email security, a Microsoft 365 Business Premium licence, and centrally managed email signatures. Reliable IT and real cyber defence, simply bundled.
Key Features
The Starter IT Support Service gives your business what it needs to get going with managed IT — expert helpdesk support and the minimum device security every managed estate should have. Simple pricing, unlimited support, and no nasty surprises.
Key Features
Every package is unlimited support with no ticket caps and no per-incident charges. Rolling monthly terms are available, longer terms carry a discount, and not-for-profit pricing applies across the range.
Shared logins break your audit trail entirely. If you ever need to show who accessed a beneficiary record, you can’t, and that’s a serious position to be in.
Free, quick, and the single most effective control available to you.
The most common gap we find in charities is a long list of active accounts belonging to people who stopped volunteering years ago.
Fundraising doesn’t need safeguarding records. Volunteers don’t need the finance folder. Straightforward to set up and difficult to explain if it’s missing.
Donor and beneficiary databases are often the least backed up system in a charity because they’re hosted somewhere and everyone assumes.
A technical control only in part, but charity mandate fraud works precisely where one trusted person can do both.
This is the part that stops most people, and it’s usually smaller than imagined.
Devices, accounts, licences, backups, and a check on your Microsoft nonprofit position. About an hour, no obligation, and you keep the findings for your trustees whether or not you go further.
There’s no sense securing an estate you’re overpaying for. This step occasionally reduces what you end up spending with us, which is the point.
Individual accounts, multi-factor authentication, leaver process and backup, in that order.
Unlimited support, monitoring and patching, with evidence maintained in a form you can hand to a funder or put in front of trustees.
Questions charities ask us
Eligible charities can access grant and discounted licensing through Microsoft’s nonprofit programme, and the specifics have changed more than once in recent years. We’ll check what your charity qualifies for as it stands now rather than quoting from memory, and we’ll tell you even where it reduces what you buy from us.
Yes, on every package, and it’s a genuine reduction rather than a gesture. The current not-for-profit rates are shown alongside the standard ones on each package page.
Pricing is per user, so it depends on who genuinely needs an account and what kind. Not every volunteer needs a full licence, and working out the right mix is part of the first conversation. We’ve no interest in licensing sixty people who need access to one rota.
It should be, and we treat it that way. Tighter access controls, proper audit trails, and extra care about where that data sits and who can reach it. For charities working with people at risk, this is the part of the job that matters most.
Yes, and it’s one of the more common reasons charities call us. We’ll tell you what’s actually true, fix what needs fixing, and give you accurate answers. Funder questionnaires are not the place for optimism.
Yes. We can give you a plain English summary of where you stand, what you’re carrying and what it would take to improve, in a form suitable for a board meeting rather than a technical report.
Depending on what happened it may be reportable to the ICO, and a serious incident may need reporting to the Charity Commission. Those are decisions for your trustees with appropriate advice, not for us. What we do is establish the facts quickly and accurately so the people making those decisions have something solid to work from.
Possibly more easily than you think, once licensing is sorted. And if our honest view is that you should spend nothing with us this year and fix two free things instead, we’ll tell you that.
We don’t work to fixed SLA response times. We work on priority, so if something is urgent it’s treated as urgent straight away rather than sitting in a contractual queue behind something trivial.
We work with charities and not-for-profits across Bristol, Bath, Cheltenham, Gloucester, Somerset and Swindon, with remote support anywhere in the UK. We’re an NCSC Assured Service Provider, Cyber Essentials Plus certified, and ISO 9001 and ISO 27001 accredited, which covers a good deal of what funders ask about a supplier.
The first conversation is about your licensing position and your actual risks, not about what we’d like to sell you. You’ll come away with something you can show your trustees either way.
We’re a really small not-for-profit community organisation working with young people in Bristol and have worked with WDYI for a year and half. The We Do Your IT team – they have always been incredibly helpful, supportive and go to great lengths to resolve any issues we have.
It was really hard to choose an IT provider because as a grant funded organisation we have very limited funding available, and have to be so careful about making the most of it – balancing risk with paying for a reasonable, proportionate service for the size of our organisation.
We’ve always been really grateful to WDYI for being really sensitive to our limited funding and capacity – they have really adapted to this to provide the most supportive service that they can and have never made us feel that we were less important than their bigger clients. The organisation has a good heart 🙂 This is really unusual for a tech company and it means a lot, so thank you.
Josh in particular has made a really big effort to always look after us, eg helping ensure we weren’t left without a laptop when a third party courier company had messed up a delivery. Thanks WDYI team 🙂
Amy Scribs – NeonDaisy CIC