For charities
Protect your donors, beneficiaries and volunteers.
Small charities hold donor details, Gift Aid records and often sensitive information about the people they help, usually with volunteers on their own devices. Brightlock Cyber gets you ready for Cyber Essentials and UK GDPR in plain English.
The risks we see most in charities
Shared and leftover accounts
Volunteers and trustees come and go. Shared logins and accounts nobody removed are one of the most common ways in.
Fake donation and payment requests
Criminals pose as a trustee or supplier to redirect money, or use a hacked account to ask supporters for donations.
Sensitive beneficiary information
Charities often hold health, family or financial details about the people they support, which UK GDPR treats as extra sensitive.
Checks written for charities
Every readiness report covers the five Cyber Essentials controls and UK GDPR. Choose "Charities" and we add these extra checks for your industry:
- 1Do volunteers and trustees each have their own login, rather than sharing accounts, for email and donor systems?
- 2Are donor records and Gift Aid declarations kept in a secure system, not spreadsheets or personal email?
- 3Does your incident plan say how to report a serious incident, such as a data breach or fraud, to the charity regulator?
Who's asking for Cyber Essentials?
- Funders and grant makers asking how you protect data
- Councils and public bodies commissioning services
- Trustees who are responsible for managing risk
What you get from Brightlock Cyber
- A free 2-minute health check
- A Brightlock Cyber Score out of 1,000, like a credit score for your cyber security
- Step-by-step fixes for the devices and apps you use
- Policies and tender answers written for your business
- Help from us or a partner if you'd rather not do it alone
Small charity on a tight budget? See the free cyber help from the government and police.
Read the guide: Cyber Essentials and data protection for small charities
Find out where you stand in two minutes.
Free, with no sign-up.