Donors and beneficiaries
Charities
One person is often a donor, a volunteer and a member. Beneficiary records must not sit beside a fundraising list. And consent is not a preference, it is a legal position with a date on it.
Seven kinds of person
Why generic CRM software fits charities badly
There is no single word for the people you deal with
Commercial CRM software is built on a simple idea: there are customers, and you sell to them. A charity has donors, beneficiaries, volunteers, trustees, members, funders and partners, and the relationships between those categories and the organisation are completely different in kind. A donor gives you money. A beneficiary receives something. A volunteer gives time. Treating all seven as Contacts with a tag is where most of the trouble starts.
It gets harder, because the same person is frequently several of them. The volunteer who sets up a monthly gift. The beneficiary who, three years later, becomes the most effective fundraiser you have. The trustee who is also a member and occasionally a supplier. A system that forces one label per person will be worked around, and the workaround is duplicate records with different addresses.
Consonas holds relationship types you name, and a person can carry more than one. The history is one history, the consent is one consent, and the address is in one place, which is the boring benefit that saves the most time.
Two populations that must not be in the same list
The distinction between the people you help and the people who fund you is the most important boundary in a charity's data, and it is the one that generic software has no concept of at all.
A fundraising volunteer needs the donor database. They must not have the safeguarding notes. Someone running a service needs the beneficiary records. They have no reason to see major donor cultivation. In a system with a single permission level per user, the only way to achieve that is a second system, which is how charities end up with a spreadsheet that is genuinely more sensitive than the CRM.
Record sensitivity in Consonas is a grant held separately from the role. That sentence is the whole design. Somebody's job title determines their role. Whether they see sensitive records is a second, deliberate decision, made by a person, and revocable without dismantling anything else. Search respects it, reports respect it, export respects it and the portal respects it, each checked separately.
Consent is a legal position, not a preference
Every organisation should handle consent properly. Charities have a sharper reason than most: the sector has been through public failures on exactly this, the regulator's expectations are specific, and the reputational cost of getting it wrong falls on the cause rather than on a brand.
The failure mode is almost always the same and it is structural rather than careless. Consent is recorded in the mailing tool. The database records something else. The list for the appeal is built from the database. Somebody who withdrew last year receives it, complains, and is entirely right to.
Here, consent is a fact on the person with a date, a channel and a source, and every send checks it again for that individual at the moment of sending rather than at the moment the list was built. There is one answer to whether you may contact someone, it lives with the person, and the sending obeys it.
Six charity situations
Six situations a charity meets in the first year
None of these is unusual. Most charities meet all six in the first year of trying to run a proper database.
| The situation | What usually happens | What Consonas does |
|---|---|---|
| Someone is a donor and a volunteer | Two records in two systems, or two records in one, with different addresses and two separate consent positions. | One relationship with two types and two histories in one timeline. One consent record, because the person only has one view about being contacted. |
| A beneficiary's records must stay separate from fundraising | A separate spreadsheet, or a separate system, and a nervous conversation about who has the password. | Record sensitivity, granted separately from the role, respected by search, reporting, export and the portal, each checked independently. |
| A trust makes a grant over three years | One opportunity marked won, and the reporting obligations live in a calendar reminder someone set. | A relationship with the funder, an opportunity with your own stages, and tasks for each report against the record rather than in a diary. |
| Someone withdraws consent to be contacted | It is applied in the mailing tool. The database still says yes, and next year's list is built from the database. | Consent is a fact on the person, checked at the moment of sending. There is one answer and every send obeys it. |
| A volunteer stops volunteering | The record is deleted, and with it the eleven years they gave you and the reason they left. | The connection ends with a date. The person keeps the history, and so do you, which matters when they come back or when you write the anniversary piece. |
| A subject access request arrives | Three systems are searched by hand, and no one is certain the answer is complete. | One organisation, one search, and tooling built for the purpose. The statutory deadline does not care how many systems you have. |
Fundraising
A grant pipeline is a pipeline, and it needs a weighted forecast
Trust and foundation fundraising has all the properties of a difficult sales pipeline: few items, large values, long timescales and decisions made by people you never meet. It is also frequently managed in a spreadsheet, because the word pipeline sounds commercial and the software that offers one is priced for sales teams.
Name your own stages: identified, researched, approached, expression of interest, full application, decision, reporting. Put a likelihood on each. What comes out is a weighted forecast, and a weighted forecast is the single most useful number you can put in front of a trustee board, because a list of eleven applications tells them nothing about whether to worry.
The stage history is worth as much. It tells you how long applications actually take, which funders decide quickly, and where in your own process things stall, which is usually at the point of writing rather than the point of asking.
Volunteers
Time given is a relationship, and it ends without being deleted
A volunteer is connected to your organisation for a period, with a role. When they stop, the connection ends with a date rather than the record being deleted. That sounds like a technicality until someone who gave you eleven years comes back, or until you write the anniversary piece and want to know who was there at the start.
Sessions, shifts and events sit in the same calendar as everything else, attached to the people they concern. Tasks against a volunteer's record mean the work of looking after them is visible to whoever is covering rather than living in the head of the coordinator who is on leave.
And because a volunteer can also be a donor without being two records, the awkward situation every charity knows about, asking a volunteer for money and getting the tone wrong, is at least visible before somebody does it.
Obligations
Subject access, erasure, and the audit trail on every plan
A subject access request has a statutory deadline and does not care how many systems you have. One organisation with one search is the difference between an afternoon and a fortnight, and between an answer you are confident is complete and one you hope is.
Erasure removes a person from every place they appear rather than from the one you were looking at: the record, the connections, the notes, the audiences, the message history, the consent records and the files. What survives is the trail's statement that an erasure happened and who did it, without the content, which is the shape the law expects.
The audit trail, the consent records and subject access tooling are on every plan including the free one, permanently. An organisation that cannot afford a paid plan is not an organisation that deserves worse evidence when something goes wrong, and in this sector it is usually the one least able to survive it.
Two decisions first
What to decide before a single record is imported
Two of these matter more here than in any other trade, and both take ten minutes at the start and a great deal longer to retrofit.
- Relationship types
- Donor, beneficiary, volunteer, trustee, member, funder, partner, supplier. Most charities need at least five of these and most CRM software offers one called Contact. Name yours in the words your trustees use in a meeting.
- The same person, several ways
- A volunteer who donates, a beneficiary who becomes a volunteer, a trustee who is also a member. One record with several relationship types and connections, rather than three records that disagree about the address.
- Consent, per channel, with a source
- The single most important configuration decision a charity makes in any system. Consent is a fact with a date, a channel and a source, checked again at the moment of sending rather than at the moment a list is built.
- Sensitivity
- Beneficiary records almost always need it. It is a grant held separately from the role, so a fundraising volunteer with access to the donor database is not one setting away from the safeguarding notes.
- Pipelines
- Grant applications and major donor cultivation are both pipelines with long timescales and few, large items. Name your own stages and set a likelihood, because a weighted forecast is far more useful to a trustee board than a list.
- Custom fields
- Gift Aid declaration status and date, funder reference, restricted fund, area of benefit. Add the few that genuinely change a decision, and resist the rest until a fortnight of real use tells you.
A fundraising volunteer needs the donor database and must not have the safeguarding notes. In a system with one permission level per person, the only way to achieve that is a second system, and the second system is always a spreadsheet.
Which is why sensitivity is a grant held separately from the role, and why we would tell a charity to configure that before importing anything.
Money
What it costs a charity, and what we will do about it
The free plan, with the limits raised
Every allowance in Consonas is a value held against your organisation rather than a constant in our code, which means we can raise any of them for a single organisation without a release and without you paying anything. For a registered charity we say yes to that almost automatically.
Write to us from the address that owns the organisation, say what the charity does and which allowance is in your way, and we will deal with it. We would rather have small charities using this properly than have a discount percentage on a page.
What we will never charge anyone for
The audit trail. Consent records. Subject access tooling. Two factor sign in. A complete export. Those are obligations rather than features, and putting them on a paid plan means the organisations least able to afford them are the ones running without them. In this sector that is not a commercial decision, it is a safeguarding one.
What we are not, so you can plan around it
Consonas does not process donations, does not calculate or submit Gift Aid, does not run a direct debit mandate and does not reconcile a bank account. It is not a finance system and it is not becoming one. It records that a donation happened so the relationship history is complete, and reads from the systems that handle money properly instead of competing with them.
If what you need is a fundraising database with payment processing built in, that is a different product and you should buy one. We would rather say that here than at the end of a trial.
An hour and a half
What a charity should do first
About an hour and a half, and the first item is not optional in this sector.
Separate donors and beneficiaries before anything else
These are two populations who must not mix, and the arrangement that keeps them apart has to exist before there is anything in the system. Sensitivity is decided separately from ownership here, which is what makes one system workable instead of two.
Write down in a sentence who may read a beneficiary record. Then configure that, then import.
Record consent properly on the donor side
Fundraising consent is the most scrutinised consent there is, and a column marked yes is not a consent record. Consent here is a fact with a date, a source and a channel.
Where you have the provenance, import it. Where you do not, knowing that now is considerably better than discovering it after a campaign.
Model volunteers as their own relationship type
A volunteer is not a donor who gives time and not a beneficiary. They need their own type, their own connections and frequently their own sensitivity treatment, because a volunteer who is also a beneficiary is common and needs handling deliberately.
Put the recurring dates in
Grant reporting deadlines, funder review dates, renewal of a regular gift, the annual return. In most charities these live in one person's calendar, and that person is the one who cannot go on leave in March.
Then leave it a month before building any segments
A month of ordinary use tells you what your actual donor categories are, which is almost never the ones a planning session produces.
Three rule books
The fundraising code, the grant agreement, and which of the two a database can evidence
Charities answer to more bodies than most organisations of their size, and only part of what those bodies ask for is a question about software.
Three rule books, and they want different things from you
Data protection law applies because you hold personal data, and it is the one with the statutory deadlines and the fines. The Code of Fundraising Practice applies because you ask for money, and its concerns are how you ask, who you ask, and whether you stopped asking when somebody said stop. The Charity Commission has a different interest, which is governance: whether trustees know what is being done in the charity's name and whether serious incidents are reported. Then each funder's grant agreement is a private contract, and a private contract can and frequently does ask for more than any regulator.
Small charities tend to treat all four as one thing called compliance, and are then surprised that satisfying one of them does nothing at all for the others. They ask for different evidence and they ask different people for it.
What gets asked about consent is provenance, not a tick
The question that actually arrives is never whether you have consent. It is how this person's details were obtained, on what date, what they were told at the time, and what has been sent to them since. A column marked yes answers none of that, and a column marked yes is what most charities have.
Consent here is a fact on the person with a date, a channel and a source, checked again for that individual at the moment of sending. That is the shape the question comes in, which is not a coincidence. It is worth being blunt about the limit: an import can carry a tick across, and it cannot carry a story. If your existing list cannot say where each person came from, you now know something uncomfortable, and knowing it before an appeal is considerably better than learning it from a complaint after one.
A grant agreement is mostly dates with a consequence attached
Read one and count the obligations. Report on the anniversary. Tell us within a set period if the chief executive or a trustee changes. Spend restricted money only on what it was given for. Keep records for a number of years after the grant ends. Permit inspection on reasonable notice. Acknowledge us in a particular form of words.
Almost all of that is a date, attached to one funder relationship, with something unpleasant on the other side of it. A task against the record is what that is for. A reminder in one person's calendar is what it usually is, and the difference shows up the year that person is on leave in the month the report is due.
The obligation that catches people is the record keeping one, because it continues after the money is spent, after the project team has gone and after the folder named for a former colleague has stopped meaning anything to anyone. What survives that is a funder relationship with the terms recorded against it.
Safeguarding is where software helps least, and that is worth saying plainly
No database makes a judgement about a person at risk, and any supplier implying otherwise is selling. What a system can do here is narrow and worth having anyway: keep the record readable only by the people who should read it, hold the fact that a concern was raised and by whom without spreading the detail through general notes, and afterwards give an honest account of who opened what and when.
That last one is the audit trail, and it is worth being exact about which reads it holds, because the difference matters to whoever answers a question about it later. Every change is recorded, always. Openings are recorded for records marked sensitive, which is the category safeguarding puts a record in: opening one writes a line naming the person, the record and the moment. Opening an ordinary record writes nothing, deliberately, because a trail that logged every list anybody scrolled would be unreadable within a week, and an unreadable trail is evidence of nothing.
Nobody can tidy the trail up, including us, and it is on every plan including the free one. The policy, the designated lead, the training and the decision to refer are not software questions and never become them.
Where the data sits, which a trustee will ask about before signing anything
The European Union or the United States, chosen when the organisation is created and fixed from that moment. There is no United Kingdom region, and for a United Kingdom charity the European Union is the ordinary and correct answer. Your organisation gets a database of its own rather than a row in a shared one.
Trustees asked to approve a new system usually want a sentence they can put in the minute. Those two are the sentence, and they are easier to say than most of what gets said about hosting.
None of which makes a charity compliant
Software holds evidence and applies a rule consistently. It does not hold the obligation. The obligation sits with the trustees, and a supplier who describes an audit trail as compliance is describing a filing cabinet as a legal opinion. We would rather write that here than have somebody quote our marketing to a regulator.
Funders and trustees
The grants officer, the trustee, the examiner and the agency that sends you people
None of them is a donor and none of them is a beneficiary. All of them are consequential, and most charities hold them nowhere at all.
The trust gives the money, and a named person forms a view of you
Hold the foundation as the organisation and the grants officer as a person connected to it with a period. That sounds fussy until the officer moves. When they do, the connection ends with a date and a new one begins somewhere else, and the fact that the person who liked your last application now reads applications at a different foundation is the single most useful piece of fundraising intelligence a small charity will get in a year.
Charities lose it constantly, because the officer was typed into a field on the trust record and overwritten by their successor. The history of who was there, and what they said on the telephone in February, is worth more than the field.
Trustees, who are usually in your database twice already
Trustee is a relationship type and a term of office, which means a connection with a start and an end instead of a label. The same person is very often also a donor, often a member, and occasionally a supplier or connected to one. That last case is not gossip, it is the related party question your examiner asks every year, and it is far easier to answer from connections that were recorded as they happened than from memory in September.
Terms of office ending are dates, and a board that discovers in a meeting that two terms expired in the spring is a board that will spend that meeting on governance rather than on the charity.
The agency that refers people to you is two records, not one
On the service side, most beneficiaries arrive from somewhere: a council team, a surgery, a housing association, a school, a court, another charity. There is an organisation, and inside it there is a named worker who actually picks up the telephone, and those are different relationships with different lifespans.
The care needed here is specific to this trade. The partnership with the referring agency belongs on the organisation and is ordinary information. The fact that a particular person was referred by that agency belongs on the beneficiary record, and it is sensitive, because in many services the referrer's identity discloses the reason. Sensitivity is a grant held separately from the role for exactly this kind of split, and reporting respects it for each person rather than presenting one total to everybody, so the person who manages the partnership is not quietly told who came through it.
The corporate partner, where one badge covers three relationships
A company that makes you its charity of the year is a funder. Someone inside it championed you and is a relationship of their own. And a number of its employees will fundraise, whose details you may hold under different circumstances and often under different consent. One logo, three relationship types, and most charities record the logo.
The consequence is predictable. The champion changes job, the partnership is not renewed, and no one saw it coming because the relationship was filed under the company. Held properly, the champion leaving is a visible event and their new employer is an opportunity rather than a loss.
The examiner or auditor, who should never be surprised
At the year end someone asks about restricted funds, when income should be recognised, and whether any trustee is connected to a supplier. The money side of those answers comes from your finance system, which is where it belongs and where it is staying.
What comes from here is the relationship side: which funder gave what and on what terms, which obligations attach, who is connected to whom, and a record of changes that nobody can edit afterwards. Producing that in an afternoon rather than a fortnight is most of what makes an examination cheap.
Carers, parents and advocates, who are not the beneficiary
The person you help is frequently not the person who telephones you. Who may speak on somebody's behalf, and what may be said to them, is a fact about a relationship rather than a courtesy, and in some services getting it wrong is the most serious mistake available to a member of staff.
That is two people connected to each other with a role, and what has been agreed recorded against the record it concerns. In most charities it lives in one worker's head and is discovered, badly, on a day that worker is not in.
Two migrations
Two migrations at once, and the service side is the one nobody puts in the plan
What charities are actually leaving, what survives the move, and the part that has to be typed by a person.
You are not leaving one system, and naming them separately is half the work
In most charities of this size what is actually in use is a fundraising database bought in a different decade, a donation or regular giving platform that holds the only reliable record of what was really collected, a mailing tool that holds the unsubscribes, a spreadsheet on the service side and sometimes a case management product beside it, a finance package that holds the restricted funds, a shared drive of forms and consent slips, and one person who has been there eleven years and knows what the codes in the old database mean.
Each of those has a different answer, and the common failure is to treat the whole thing as one project, discover it is enormous, and therefore never begin. It is at least two migrations with different risks, and they should be planned as two.
The donor list moves. The provenance mostly does not.
Names, addresses, telephone numbers and giving history come out of almost any fundraising database as a spreadsheet, and a spreadsheet is what gets brought over. What rarely comes with it is how each person came to be on the list, when they agreed to anything, and what they were told at the time.
So look at the export before you plan the campaign. If it has a consent column and no source, you have inherited a tick and not a consent record. The two honest responses are to record what you can genuinely evidence, and to treat the rest as people who need to be asked again. Asking again is expensive and loses names. It is still cheaper than the other outcome, and the other outcome is the one that ends up in a newspaper about the sector rather than about you.
The service side is the harder half, and it is usually a spreadsheet
It holds the most sensitive material the charity has, it has no clean export because the file is the system, and it is almost always scheduled last. Do it first instead, for one structural reason: it is far easier to import into an arrangement that already restricts than to import openly and restrict afterwards, because in between those two moments the material is readable by whoever did the import.
Which is the other thing worth saying. The migration is itself a processing event. Whoever handles that spreadsheet reads it. If the plan is a willing volunteer with a laptop at home, that is a decision about beneficiary data and it deserves to be made deliberately by somebody who is allowed to make it, rather than settled by who has a free Tuesday.
Giving history: bring what changes a decision, not thirty years of transactions
The temptation is to bring everything, because it is there. What a fundraiser actually looks at before picking up a telephone is the first gift, the largest gift, the most recent one, whether a regular gift is running and whether a declaration exists. Bring those.
The full transaction record belongs where the money is properly handled, which is the finance system and the giving platform, both of which are staying. Ten years of card transactions copied into a relationship system is not an asset. It is noise that you are now responsible for protecting.
What has to be rebuilt by hand, and roughly what it costs in evenings
Your relationship types, because the old system had one called Contact. The sensitivity arrangement, because nothing else has one. Your grant pipeline stages, which in an old database are usually a status code someone chose in 2014 and everybody has since reinterpreted. The recurring dates: reporting deadlines, funder review dates, renewal of regular gifts, the annual return. And the consent records, to the extent you can evidence them.
That is an evening for the pipeline and its stages, an evening for a year of dates, and a longer conversation about consent that is really a decision rather than a task. None of it comes across in an export, because none of it is a row in the old system. It is the judgement that was never written down.
The old database rarely switches off on the day you hoped
Plan to keep read access to it through one full year end. The questions that arrive from an examiner are about the year that was recorded there, and answering them from a migration report is miserable. Run one year end out of the new system before decommissioning the old one, and run an export out of the new system on the first afternoon so you know what you would actually get if you ever needed it.
Buy something else
Five kinds of charity that should buy something else, and two we would rather not send away
More specific than the limitations named elsewhere on this page, because the shape of the charity matters more here than the feature list.
The grant maker, which is this whole page in a mirror
A foundation gives money away. Applications arrive rather than go out, they are assessed against published criteria, a panel decides, payments run on a schedule and reports come back in. Relationships and a pipeline with your own stages cover the front of that and nothing of the assessment, the scoring or the payment schedule.
If giving money away is the business rather than a thing you also do, buy a product built for it. This is one of the two we would rather not send away, and saying so at the start of a trial is better manners than saying it at the end.
The charity whose real problem is casework
An advice service, a hospice, a refuge, a service delivered under a statutory contract. What those need is structured assessment, outcome measurement, risk rating and returns with defined fields, and records of that character belong in a system built for them rather than in a relationship system with custom fields bolted to it.
Consonas will hold that a person exists, who they are connected to, which records are sensitive and who may read them. It will not hold an assessment framework, and a charity whose main difficulty is casework should buy for the casework and decide about the fundraising side afterwards. That is the second one we would rather not send away.
The charity whose actual pain is collecting money
No card processing, no mandates, no reconciliation, no Gift Aid claim and no submission to HMRC. If what hurts is regular gifts failing, or a donate button that loses people, or a claim that takes a fortnight to assemble, then the useful purchase is a giving platform or a better finance package, and a relationship system will not touch the pain at all.
Come back to this when the difficulty is that no one knows who these people are, which is a different complaint and the one this is for.
The federation whose branches each want their own data
Each customer organisation gets a database of its own. For a national body whose branches largely run themselves that is a real question rather than a detail: separate organisations mean separate data, separate sign in and separate everything, which is exactly right when the branches are independent charities and exactly wrong when head office wants one supporter list.
The reason to decide before you create anything is that the arrangement is made at creation. If you are in that shape, describe it to us first and let us tell you honestly whether it fits, because it is not a question that gets easier once there is data in several places.
The charity with forty donors and a spreadsheet that has not failed
The test is not how many donors you have, it is whether anything was forgotten this year that cost you. If no deadline slipped, no one was contacted who had asked not to be, no beneficiary record was seen by somebody who should not have seen it, and the person who keeps the spreadsheet can go away for a fortnight without anything stopping, the spreadsheet is winning and should be left alone.
The three things that change that answer are a second member of staff who needs the data, a funder who starts asking questions about records, and the moment the consent position stops being knowable from memory. Any one of those is a reason. Being told a charity ought to have a CRM is not.
Where the mechanisms behind all this are described
Consent at the moment of sending is set out on marketing and automation, the sensitivity grant on permissions and the audit trail, and the quarterly numbers a board asks for on reporting. A charity with a subscription base as well as donors should read membership organisations beside this page, and one running courses or accredited training will find the cohort calendar on education and training.
Trustee questions
Asked by charities
Is there a discount for charities?
Yes, and the honest version is better than a percentage. Every allowance in Consonas is a value held against your organisation rather than a constant in our code, so we can raise the free plan's limits for a registered charity without you paying anything. Write to us from the address that owns the organisation, say what you do, and ask. We say yes to charities almost automatically.
Does it handle Gift Aid?
It records the declaration: whether one exists, when it was given, and the file if you hold one. It does not calculate a claim and does not submit anything to HMRC. Being a recognised filing product carries obligations and a testing regime that would take over this product, and we have decided against it rather than not got to it. Your finance system should do the claim.
Can we keep beneficiary data properly separate from fundraising?
Yes, and this is the configuration to get right on day one. Record sensitivity is a grant held separately from the role, so somebody can have full access to the donor database and no access at all to safeguarding records. It is respected by search, reporting, export and the portal, each checked independently rather than relying on one gate.
Does it do donation processing?
No. It does not take card payments, does not run a direct debit mandate and does not reconcile a bank account. It records that a donation happened, against the person who gave it, so the relationship history is complete. Where you have a payment platform doing the money properly, the intention is to read from it rather than replace it.
We are a membership organisation as well as a charity. Does that work?
Yes, and it is common. Member is a relationship type, membership is a connection with a period so lapsed members keep their history, and renewals are tasks against the record. The sector page on membership organisations goes into it further.
Our trustees ask for numbers every quarter. What can we give them?
The dashboard covers what is open, what closed, what is coming, what is late and where enquiries came from, scoped to what each person may see. For a grant pipeline the weighted forecast is usually the number a board actually wants, because a list of eleven applications tells them nothing and an expected value tells them whether to worry.
What happens to our data if we stop paying?
You drop to the free plan rather than out. Nothing is deleted, everything stays readable and searchable, and export continues to work. For an organisation whose funding is uncertain by nature, that is worth checking with any supplier before you commit, and worth checking by actually running an export rather than by reading a page like this one.
Is the audit trail enough for our auditors?
It records who changed what and when, it cannot be edited by anyone including us, and it is on every plan including the free one. Whether that satisfies a particular auditor is a question for them rather than for us, and we would rather you asked them with the facts than took our word for it.
Ask us to raise the limits
Start on the free plan, and write to us about what your charity does. For a registered charity, raising an allowance is a conversation instead of an invoice.
Three people, a thousand relationships, no card and no time limit.