AI Governance for a Toronto Non-Profit: A Budget-Conscious Framework That Satisfied the Board
A mid-size Toronto non-profit faced board concerns about AI use with donor and beneficiary data. With limited IT budget, the organization needed a governance approach that was practical, not enterprise-scale.
AI Governance for a Toronto Non-Profit: A Budget-Conscious Framework That Satisfied the Board
*This is a composite case study. The scenario, challenge, and outcome are based on patterns Group 4 Networks observes across Toronto non-profit clients. No individual organization is identified.*
A Toronto non-profit organization with 65 staff and an annual operating budget in the low millions served a population of vulnerable beneficiaries and managed relationships with a donor base of several thousand individuals. Its IT environment was lean - Microsoft 365, a CRM, a donor management platform, and a small number of productivity tools managed by Group 4 Networks under a managed IT engagement.
In early 2026, a board member raised a concern at a governance committee meeting: had the organization thought through how AI tools were being used with donor and beneficiary data? The executive director did not have a ready answer. A second board member noted that several grant funders had begun asking about data governance practices in grant applications. A third raised the reputational risk if donor data ended up in an AI training dataset.
The concern was legitimate. Staff had begun using AI tools organically - grant writers were using ChatGPT to draft proposals, program coordinators were using AI writing assistants for beneficiary case notes, and the fundraising team was experimenting with an AI tool for donor segmentation. None of it was sanctioned. None of it had been assessed for PIPEDA implications. And none of it was visible to the executive director or the board.
The executive director engaged Group 4 Networks to address the board's concerns and build a governance framework scaled to the organization's budget and operational reality.
Group 4 Networks completed an AI inventory audit within five business days, covering the organization's Microsoft 365 tenant, network, and a staff survey.