Nonprofits | High Point, NC
IT Support for Nonprofits and Charitable Organizations
Preferred Data supports the computers, Microsoft 365, networks and donor and client data of nonprofits on the same managed IT plans our business clients use, priced per user per month and quoted in writing, and every plan includes 24/7 threat detection and response. We are headquartered in High Point, North Carolina, work on site within 200 miles of our office, and deliver our services remotely to clients across the United States and around the world. Schedule a consultation or call (336) 886-3282.
What we look after for nonprofits
- Managed IT and helpdeskComputers, Microsoft 365 and networks, monitored, patched and supported.
- Cybersecurity24/7 detection and response, MFA and email threat protection on every plan.
- Backup and recoveryRestore-tested backup for workstations and Microsoft 365.
- Cloud and Microsoft 365Licensing matched to each role, and moves off aging servers.
- In business since 1987
- 39 years
- Active clients
- 100+
- Average client tenure
- 20+ years
- BBB Accredited rating
- A+
- On site from High Point; remote support worldwide
- 200 mi
- Threat monitoring on every plan
- 24/7
What IT support does a nonprofit need?
A nonprofit needs the same foundation as any business: computers and Microsoft 365 that are secured, patched and backed up, a helpdesk staff can call, and someone planning the next budget cycle. In North Carolina, where we are headquartered, the nonprofit sector employed more than 298,000 people, over 8.4% of the state's workforce, in Independent Sector's state profile (2016 data), and nonprofits hold the same kinds of personal data businesses do.
- Workstations, laptops and Microsoft 365, monitored and patched under managed IT
- Donor, member and client records protected by the security baseline on every plan, backed by our cybersecurity services
- Accounts created and removed promptly as staff and volunteers come and go
- Restore-tested backup for workstations and Microsoft 365
- A technology plan and budget your board can approve
Key takeaway: Mission-driven does not mean lower risk. A nonprofit holding donor and client data needs the same security baseline as a business.
What Microsoft 365 discounts can nonprofits get?
Microsoft gives eligible nonprofits up to 300 free Microsoft 365 Business Basic licenses and discounts of up to 75% on many Microsoft 365 plans, including Business Premium and Business Standard, according to Microsoft Learn. The free Business Premium grant and the Office 365 E1 grant were discontinued: existing grant licenses expire at the next renewal date and do not renew.
| Offer | What Microsoft provides | What to check |
|---|---|---|
| Microsoft 365 Business Basic grant | Up to 300 granted (free) licenses | It is a different plan from Business Premium, so compare features before moving users |
| Microsoft 365 Business Premium grant | Discontinued; grant licenses expire at the next renewal and do not renew | Your renewal date, so users are moved before licenses lapse |
| Office 365 E1 grant | Discontinued; licenses expire at the next renewal | Same as above |
| Business Premium and Business Standard | Nonprofit pricing, part of discounts of up to 75% on many Microsoft 365 offers | Which staff actually need the paid features |
| Azure | $2,000 in Azure credits a year | Whether you have a workload that belongs in Azure |
Eligibility is decided by Microsoft: your organization registers and is validated through Microsoft's Nonprofit Hub. Preferred Data does not set these prices. Every Preferred Data plan includes Microsoft 365 licensing matched to each role, so we plan your licenses around the offers you qualify for and move users before a grant lapses.
Does North Carolina's data breach law apply to nonprofits?
Yes. North Carolina's Identity Theft Protection Act defines a business as any group "whether or not organized to operate at a profit" (N.C.G.S. 75-61), so a nonprofit that holds North Carolina residents' personal information must follow the breach notice rules in N.C.G.S. 75-65: notify affected people without unreasonable delay, notify the Consumer Protection Division of the Attorney General's Office, and notify the consumer reporting agencies when more than 1,000 people are notified at one time.
This page is general information, not legal advice; your attorney decides which laws apply to you and what a specific incident requires.
- Multi-factor authentication on every account: Microsoft research shows MFA can block more than 99.2% of account compromise attacks
- 24/7 managed detection and response and endpoint detection and response on every plan
- Email threat protection and security awareness training for staff
- Backups we verify by restoring them
How much does managed IT cost for a nonprofit?
Preferred Data prices nonprofits the way it prices businesses: per user per month on one of three plans, with the equipment we manage counted during a free quote and a written quote before any commitment. We do not publish a rate card.
| What you need | Essentials | Professional | Complete |
|---|---|---|---|
| Helpdesk hours | Remote helpdesk, business hours | Priority response with extended hours | 24/7, including after-hours and weekends |
| Technician hours included each month (whole account) | 2 | 4 | 8 |
| 24/7 threat detection and response, MFA, patching and restore-tested backup | Included | Included | Included |
| User onboarding and offboarding | Not included | Included | Included |
| Email encryption and enterprise password manager | Not included | Included | Included |
| Technology planning | Annual technology review | Quarterly business reviews, IT roadmap and budget | Dedicated vCIO with a monthly strategy cadence |
The number to weigh against it is an incident. IBM's Cost of a Data Breach Report 2026 puts the global average cost of a breach at $4.99 million, 12% higher than the year before. To rough out a budget first, use the free IT budget calculator, or read our guide to IT support costs for small businesses.
What should a nonprofit look for in an IT provider?
Look for a written scope, a security baseline that cannot be stripped out to hit a price, backups that are tested by restoring them, and a provider who plans licensing around Microsoft's nonprofit offers instead of overselling seats. Preferred Data puts in writing what each plan does and does not cover, and does not let clients remove the security baseline to lower the price.
For a longer checklist, see how to choose a managed IT provider.
- A written proposal that lists what is excluded, not just what is included
- Prompt removal of access when staff or volunteers leave (included from Preferred Professional up)
- A technology budget the board can approve, with an IT roadmap from Preferred Professional up
- On-site help when something cannot be fixed remotely
Where do you work, and do you come on site?
Preferred Data supports nonprofits remotely across the United States and around the world, and on site within 200 miles of our headquarters at 1208 Eastchester Drive in High Point, North Carolina, which covers the Piedmont Triad, Charlotte, Raleigh and most of North Carolina. Our service area page lists what we deliver remotely and on site.
- IT services in High Point, where our office is
- IT services in Greensboro and Winston-Salem
- IT services in Charlotte and Raleigh
Free resource library
Free resources for nonprofits
Guides, free tools, policy templates and checklists picked for nonprofits, in one place. Everything here is free to read and use. Most of it needs no sign-up; the policy generators ask for your contact details before the finished document unlocks.
Start with a guide
GuideHow to Use AI at Work Safely: A Small Business GuideHow a small business can use AI tools safely: approve the right tools, keep sensitive data out, write a short policy, train people and have a person check the output.
GuideRansomware: How North Carolina Small Businesses Prevent It and RecoverWhat ransomware is, how criminals usually get in, the handful of controls the FBI and CISA recommend, what to do in the first day, and whether to pay.
GuideCyber Insurance for Small Businesses: What Insurers Ask and How to QualifyWhat cyber insurance covers, the security controls insurers commonly ask about, why claims get disputed, and how to get ready for your next renewal.
GuideNorth Carolina Data Breach Notification Law: A Plain-English GuideWho North Carolina's breach notice law applies to, what counts as personal information and a breach, who you must notify and when, and the written disposal policy the law expects.
Free tools
Free toolCyber Insurance Readiness CheckerSixteen quick questions about the security controls insurers commonly ask about, with a readiness score and a fix list in priority order.
Free toolCybersecurity AssessmentEighteen yes, partly or no questions on logins, computers, data and people, with a letter grade and the actions to take first.
Free toolIT Budget CalculatorPick the IT services your business needs and get a realistic monthly and yearly budget range for your size.
Free toolWebsite Health AnalyzerEnter any web address to check its speed, security settings and search basics, with a score for each.
Free toolM&A Technology Readiness AssessmentFor buyers of a business: rate the target company’s technology risk and see how hidden IT costs could change the deal math.
Free toolEmail Domain Security CheckerType your domain to see, in plain English, whether criminals can send email in your name and whether you meet the Google and Yahoo sender rules.
Policy templates
Policy templateAI Governance PolicySet how your organization approves, uses, oversees and audits AI tools, aligned to the NIST AI Risk Management Framework.
Policy templateAI Acceptable Use PolicyGive every employee clear, signable rules for using ChatGPT, Copilot, Gemini and other AI tools at work without exposing company or customer data.
Policy templateIT Acceptable Use PolicySet clear rules for how employees use company computers, email, internet, software and data, and what monitoring they should expect.
Policy templateInformation Security PolicyEstablish the core security program every insurer, auditor and customer now asks about: data classification, access control, patching, encryption, logging and vendor risk.
Policy templateIncident Response PlanKnow exactly who does what in the first hours of a ransomware attack, data breach or business email compromise, including who to call and which notification clocks start.
Policy templatePassword and MFA PolicyModern password and MFA rules based on current NIST SP 800-63B guidance: long passphrases, a password manager, no forced resets, and phishing-resistant MFA where it matters.
Show 15 more policy templates
Policy templateRemote Work and BYOD PolicyLet people work from home and use their own phones safely, with clear rules for home networks, device enrollment, company data and what happens when someone leaves.
Policy templateData Backup and Recovery PolicyDefine what gets backed up, how often, where copies live and how fast you must recover, using the 3-2-1-1-0 rule that ransomware now demands.
Policy templateWire Transfer Verification PolicyStop fake invoices and email payment fraud with simple rules: call back on a known number before any bank change, two approvers for large payments, and no payment changes by email alone.
Policy templateVendor Risk Management PolicyChoose and monitor the vendors that hold your data or reach your systems: a vendor list, simple risk tiers, security questions, contract clauses, remote access rules and a clean exit.
Policy templateAccess Control PolicyGive people only the access they need, protect every sign-in with MFA, keep admin accounts separate, review access every quarter and remove it the moment someone leaves.
Policy templateData Retention and Destruction PolicyDecide what records to keep and for how long, with a sensible default schedule, legal holds, and secure destruction of paper and devices following NIST SP 800-88.
Policy templateSecurity Awareness Training PolicyDecide who gets cybersecurity training, when, how phishing tests work, and which training records you keep for insurers and customer questionnaires.
Policy templateBusiness Continuity PolicyKeep the business running through storms, outages, fires and cyberattacks: critical functions, recovery targets in plain words, a call tree and an annual tabletop test.
Policy templateData Protection and Privacy PolicySet internal rules for the personal and confidential data you hold: collect less, limit access, share carefully with vendors, handle requests, and respond to a breach under North Carolina law.
Policy templateIT Asset Disposal PolicyRetire old computers, phones, servers and copiers safely: track every device, wipe or destroy data to NIST SP 800-88, get certificates of destruction, and recycle through certified recyclers.
Policy templateVendor Remote Access PolicyControl how vendors, machine builders, software suppliers and IT providers connect in: approved tools only, a named account and MFA for every technician, access switched on per session, logged sessions and quick removal.
Policy templateIncident Response PlaybooksStep-by-step playbooks for email account takeover, vendor or IT provider compromise, insider data theft, malware, misdirected data and website attacks, built to work with your incident response plan.
Policy templateBreach Notification ProcedureDecide with your breach counsel whether an incident legally requires notice, then notify the right people with the right content: North Carolina rules by default, with HIPAA, FTC, DFARS and multistate steps when they apply.
Policy templateIncident Report FormThe forms to fill in during a cyber incident: an initial report, triage sheet, timestamped log, evidence and chain of custody register, decision log, notification tracker, cost tracker and closure summary.
Policy templateTabletop Exercise PlanRehearse your incident response plan in a two-hour guided discussion: ready-made ransomware, wire fraud and account takeover scenarios with timed injects, a scoring sheet and an after-action report.
Checklists
ChecklistRansomware: the first 24 hoursHour-by-hour steps for the first day after ransomware or a suspected breach: what to unplug, who to call, and what to report.
ChecklistEmployee offboarding IT checklistEverything to revoke, recover and transfer when someone leaves: accounts, MFA, shared passwords, email, devices, keys and licenses.
ChecklistOffice move IT checklistThe IT plan for moving or opening an office: internet orders, phones, cabling, Wi-Fi, cameras, cutover weekend and testing.
IT questions nonprofits ask us
Do you provide IT support for nonprofits outside North Carolina?
Yes. Preferred Data supports nonprofits on the same managed IT plans our business clients use, with 24/7 threat detection and response on every plan, delivered remotely to organizations across the United States and around the world. On-site support is within 200 miles of our High Point office. Microsoft 365 licensing outside the United States and any on-site need beyond 200 miles are set out in your written quote. Our service area page lists what we deliver remotely and on site.
Is the Microsoft 365 Business Premium grant for nonprofits still available?
No. Microsoft discontinued the free Business Premium grant: existing grant licenses expire at the next renewal date and do not renew. Eligible nonprofits can still get Business Premium at nonprofit pricing, part of discounts of up to 75% on many Microsoft 365 offers, according to Microsoft Learn.
How many free Microsoft 365 licenses can a nonprofit get?
Microsoft provides up to 300 granted Microsoft 365 Business Basic licenses to eligible nonprofits. Business Basic is a different plan from Business Premium, so check which features your staff rely on before moving them.
Does North Carolina's data breach law apply to nonprofits?
Yes. N.C.G.S. 75-61 defines a business as any group whether or not it is organized to operate at a profit, so the breach notice duties in N.C.G.S. 75-65 apply to nonprofits that hold North Carolina residents' personal information. That includes notifying affected people and the Attorney General's Consumer Protection Division. Your attorney can confirm which laws apply to your organization.
How much does managed IT cost for a nonprofit?
Preferred Data prices per user per month on one of three plans, with the equipment we manage counted during a free quote. We do not publish a rate card; you get a written quote with no obligation. Request one on the pricing page or call (336) 886-3282.
Can you help us plan technology costs for a budget or grant request?
Preferred Professional includes quarterly business reviews with an IT roadmap and budget, and Preferred Essentials includes an annual technology review. Both give you written numbers to take to your board or funders.
Do you provide on-site IT support in Greensboro, Charlotte and Raleigh?
Yes. Our office is in High Point and we provide on-site support anywhere within 200 miles, including Greensboro, Winston-Salem, Charlotte and Raleigh. Preferred Professional includes on-site visits when we cannot fix a problem remotely, and Preferred Complete includes unlimited on-site support.
Sources
- Microsoft Learn, Microsoft for Nonprofits updates (grant changes)
- Microsoft Learn, Nonprofit offerings and products
- Independent Sector, State profile: North Carolina
- North Carolina General Statutes 75-61, definitions
- North Carolina General Statutes 75-65, protection from security breaches
- Microsoft Learn, Plan for mandatory Microsoft Entra multifactor authentication
- IBM, Cost of a Data Breach Report 2026
Related services and resources
Put your IT budget where your mission needs it
Tell us about your staff, your volunteers and what is not working today. We will recommend a plan, plan your Microsoft licensing around the offers you qualify for, and put the scope and price in writing before any work starts.
Preferred Data Corporation, 1208 Eastchester Drive, Suite 131, High Point, NC 27265