Charity Tech Schutzpaket

The Charity Tech Protection Suite is for UK registered charities (Charity Commission registered, typically 50-500 staff) where the trustees know donor data is sensitive, the IT budget is thin, and the next NCSC alert or media story about a charity breach lands directly on the CEO's desk. It bundles three SummitBridge Horizon tools tuned for the charity context: 1. Cyber Baseline — a lightweight controls register aligned to the NCSC Small Charity Guide and the Cyber Governance Code of Practice for trustees. Covers MFA enforcement, backup posture, joiners-movers-leavers, supplier risk, and incident response runbook — the controls insurers actually ask about at renewal. 2. Compliance Tracker — UK GDPR, DUAA 2025, fundraising-regulator obligations and the Charity Digital Code of Practice 2025 (which added a new "Data" principle and stronger AI guidance) tracked in one place, with evidence upload and trustee-meeting export. 3. Email & Donor-Data Safety Training — short modules built around the threats charities actually see: CEO impersonation around payroll cycles, fake gift-aid HMRC lures, donor-database phishing, and AI-generated grant-application scams. Designed for the charity that does not have a CISO and does not want to spend £15k on a consultancy. Trustee-board reports come out as PDF in the language a non-technical board chair can sign off. Honest pre-launch note: SummitBridge Horizon Ltd was incorporated in April 2026. The templates are reviewed against published NCSC, ICO, Charity Commission and Charity Digital guidance, but we have not yet certified a roster of charities. Early-adopter pricing reflects that. Use cases: preparing for a Trustees' Annual Report cyber section; passing a major-donor or grant-funder due-diligence pack; responding to a trustee question after the latest sector breach headline; demonstrating Charity Digital Code 2025 alignment. Out of scope (so we are honest about it): this is not Cyber Essentials Plus certification (see our SME Cyber Starter for that), not a SOC 2 audit, and not a substitute for a DPO if your scale legally requires one.

⚠️ Legal disclaimer (LEGAL): This product is not legal advice and SummitBridge Horizon Ltd is not authorised by the SRA. Read the full disclaimer below or in our Terms of Service before purchase.