We have a small budget. Where does it go furthest?
Usually into the donation flow and the donor record, in that order. A donation page that loses people at the payment step costs more than any software licence, and a donor record scattered across spreadsheets costs staff hours every week and makes reporting a reconstruction. Both are contained pieces of work with a return you can see in a quarter.
Can it produce the reports our funders ask for?
That is one of the main reasons to build it. Funder reporting is usually rebuilt by hand from exports because the data was never recorded in a shape that matched the questions. Deciding those questions first and recording against them turns a week of assembly into a report that is generated.
How do you handle Gift Aid and receipts?
As part of the donation flow rather than as an afterthought, since both depend on data captured at the moment of giving. Declarations, receipts and the records behind a claim come off the same donation record, which is also what makes an audit straightforward rather than a search.
Can volunteers use it without training?
That is the design constraint that matters most here, because volunteer turnover is high and nobody has time to train. It means fewer screens, obvious defaults, and forgiving behaviour when something is entered wrongly. Software built for staff who use it daily fails badly when handed to someone using it for the third time this year.
Can we run this on donated or discounted licences?
Usually, and we look for that before quoting anything. Most large vendors run a non profit programme, and between them they will often cover email, storage, a share of cloud hosting and the CRM. The edges are the part to plan for. Donated tiers cap seats, thin out the administrative controls, sometimes exclude the very interface an integration needs, and eligibility gets reassessed on somebody else's schedule. A grant that covers hosting for a year is not a budget line that renews itself. So we design for the day the terms change: documented exports, no rule that exists only inside a donated tool, and a written note of what year two costs if the programme ends.
How do you handle restricted funds?
By coding the fund at the moment the money arrives rather than at the end of the quarter. A restricted gift carries a condition, and that condition has to travel with the donation record, with the spending against it, and into the report that eventually cites it. Single gifts sometimes split across two funds, and an appeal raises restricted and unrestricted income in the same week, so the system holds a split instead of forcing a choice. Retrofitting fund codes onto a year of donations is the work nobody budgets for and it is rarely finished accurately. The test is whether a trustee or an auditor can pick one payment and trace it back to the pot it was allowed to come from.
Our IT is one volunteer. What happens when they stop coming?
This is the risk we design against first, because it is the one that actually ends charity systems. Nothing is built in a personal account and nothing depends on one person's login, phone or laptop. Domains, hosting and administrative access are registered to the organisation, with a trustee able to recover them. Data can be exported without us. The handover note is written for the next volunteer and for a trustee who is not technical, in plain language, with the few things that must happen monthly listed separately from the things that can wait. If we build something only we can run, we have made your position worse rather than better.
We hold records about vulnerable people. How is that kept apart from fundraising?
Structurally, rather than by policy alone. Beneficiary records and donor records answer to different rules and belong behind different permissions, so a fundraising volunteer working on an appeal cannot open a case note. Access is granted by role, for a reason, and reviewed. Case notes carry a retention period with an actual date on them rather than a vague intention. Reports to funders are built from counts and outcomes rather than names, which is usually what they wanted anyway. The largest real risk in most small charities is not a breach of the CRM, it is a spreadsheet of service users on a shared drive that everyone can open and nobody remembers making.