Microsoft Security 
for Nonprofits 

Identity & Access

The “who’s actually logging in?” problem.

• MFA
• Conditional Access
• Strong authentication policies

If yes, you can skip this paragraph. If not, let’s guide you through it! 

STEP 1: Check Eligibility 

• Your organization must be a legally registered nonprofit (e.g. charity, NGO) or similar (like a public library or public museum). Microsoft Learn+2Microsoft+2
• You must have a mission that benefits the broader community. Microsoft+2Microsoft+2
• You need to agree to Microsoft’s non-discrimination policy. Microsoft Learn

STEP 2: Start the Application 

• Go to the Microsoft Nonprofit Hub. Microsoft Learn+1
• Use the “Eligibility Pre-Check” tool to run a quick self-assessment for your country. Microsoft Learn+1

STEP 3: Fill in Your Organization’s Details 

• Provide contact information (name, role, email, country) for the person handling the registration. Microsoft Learn
• Submit organization info: legal name, address, website, legal identifier (like your charity registration number). Microsoft Learn
• Verify your phone number (via SMS or call). Microsoft Learn
• Create or sign into a Microsoft 365 (or Azure) tenant. Microsoft Learn

STEP 4: Validation by Microsoft 

• After submitting, your org is validated by a third-party partner. Microsoft Learn
• This typically takes up to 3 business days, though it can vary. Microsoft+1
• You’ll get email updates on your validation status. Microsoft Learn

STEP 5: Complete Compliance / Attestation 

• You must attest (declare) that you will follow Microsoft’s nonprofit program rules (e.g. about how licenses are used). Microsoft Learn
• Once approved, you’ll gain access to the Microsoft Nonprofit Hub, where you can claim discounts, grants, and other offers. Microsoft Learn

• Let’s check Security! 

You'd like to know NOW if your mission is at risk? 

We have teamed up with QS Solution to provide you with a free self-assessment tool! No installation or advanced technical expertise required. It’s simple to use: complete the assessment yourself and receive straightforward, easy-to-understand recommendations. You are free to decide whether to follow up on them.

You can review your results with your reseller and begin taking steps toward a safer work environment, or ask your reseller for more in-depth assessments if needed. 

• We are sure you’ve heard
about Microsoft AccountGuard 

Free extra protection for nonprofits facing high-risk threats. 

What it is 

A free Microsoft service that gives nonprofits early warnings if they’re targeted by nation-state or highly sophisticated cyberattacks.

What it does 

• Alerts you if Microsoft detects targeted attacks
• Covers both organizational accounts and (optional) personal accounts
of key staff
• Provides guidance on what to do next
• Offers extra identity protection resources (e.g., discounted YubiKeys)

Why it matters 

Perfect for nonprofits working in advocacy, human rights, democracy, or any area where targeted attacks are more common. 

What it’s not 

Not a full SOC/MDR service — it’s an added layer of monitoring + early warning, not a replacement for Defender, MFA, or Zero Trust. 

• Discounted Microsoft
Licenses for Nonprofits 

These discounts are real, and they’re big:

• M365 Business Premium — 75% off
• M365 E3 — 75% off
• M365 E5 — 60% off
• E5 Defender / E5 Purview — 60% off

Defender for
Office 365 

Protects your inbox from phishing and malicious links — still the #1 cause of nonprofit breaches.

Defender for Endpoint 

Keeps your laptops and devices safe by stopping malware and ransomware before they spread. 

Identity Protection 

Helps catch suspicious logins and prevents attackers from using stolen passwords.
 

Intune (Device Management) 

Makes sure staff devices are secure and compliant — even when people work remotely or use personal laptops. 

Information Protection (Sensitivity Labels) 

Ensures donor data and sensitive documents are encrypted and only seen by the right people. 

Zero Trust built in 

A modern “trust no one by default” approach that reduces risk even if a password gets stolen.


 

• But what if...?

Common Doubts That Nonprofits Have

We are too small. Are we really a target? 

Unfortunately… yes. Attackers love small organisations with big missions. 

Is this expensive? 

Not with nonprofit pricing. Many tools are 75% off or free. 

We do not have an IT department. 

Totally fine. Many steps are simple, and your reseller (or we) can help. 

Can we check our security first? 

Yes, take the free security assessment. 

Who do we talk to about licenses? 

Your reseller, or if you do not work with one yet, reach out to us!