Nonprofit priority: treat donor, beneficiary and case information as confidential by default. AI should never become a shortcut around consent, safeguarding or professional judgment.
Protect the people behind the records
Be explicit about the information that cannot enter public tools: donor records, beneficiary stories, case notes, protected personal data, payment details and credentials. Remove identifying details before using AI for permitted work.
Use AI where it helps safely
Permitted uses can include first drafts of general communications, internal meeting summaries, non-sensitive research outlines and accessibility support. Every external message should receive human review for accuracy, tone and mission alignment.
Give volunteers simple instructions
Volunteers often need rules that work without access to a legal team. Use examples, name an owner, and provide a short path for asking questions before putting information into a tool.