Practical AI Readiness
Practical AI Readiness
for Nonprofits
Learn how to find out where AI is already showing up in your organization, evaluate the real risks, and make decisions your team can actually follow.
AI decisions at nonprofits rarely start with a policy meeting or a strategic plan. They start with a staff member who found a tool that saves them two hours a week. Or a platform that quietly turned on an AI feature during a software update. Or a vendor who mentioned "AI capabilities" in a renewal conversation and nobody followed up on what that actually meant.
By the time leadership starts asking questions, AI is already part of several workflows. Some of it is fine. Some of it involves sensitive data nobody has reviewed. And in most organizations, nobody can tell you exactly where the line is.
That is not a failure of leadership. It is what happens when technology moves faster than decisions. And it is exactly the kind of gap that creates real consequences: a data handling situation your clients did not consent to, a vendor contract with terms nobody read, or a staff member who made a reasonable-sounding decision without any guidance to work from.
"The risk isn't using AI. It's using it without knowing what it can access, retain, or share, and finding out later."
What AI Readiness Is and Isn't
AI readiness gets described in a lot of ways: an organizational transformation, a strategic initiative, something that requires significant investment before you can begin. For most nonprofits, that framing is not useful.
AI readiness is:
- Knowing what AI tools and features your organization is already using
- Understanding which of those touch sensitive information
- Having clear rules your staff can actually follow
- A policy starting draft that reflects real decisions, not borrowed language from a template
AI readiness is not:
- Building cutting-edge AI models
- A one-time workshop that produces a document nobody uses
- A guarantee of legal or regulatory compliance
- Something that requires a dedicated AI team or a large budget to get started
You do not need a glossy strategy document. You need enough clarity to stop operating on assumptions.
A Practical Path Forward
The most useful thing most nonprofits can do right now is get an honest picture of where they actually stand. That means working through five things in the right order.
Map your sensitive and restricted information first. Before you evaluate tools or set rules, you need to know what information would cause real harm if it were exposed, misused, or connected to the wrong tool. That is the foundation everything else builds on.
Document where AI is already showing up. This is usually more than leadership expects: built-in features, informal tools, experiments that became workflows. Get the real picture before you try to govern it.
Evaluate your vendors and platforms. Using a tool does not mean you know what it does with your data. Free tiers, built-in AI features, and recently updated terms all deserve a closer look.
Set rules your staff can actually follow: clear, plain-language decisions about what is allowed, what is not, who approves new tools, and what to do when something goes wrong. Rules that live only in a workbook are not rules.
Build a first draft of your AI policy. Not a finished legal document, but a starting point that reflects your organization's real decisions, ready for leadership review and legal input before it becomes official.
That is the sequence the Nonprofit AI Readiness Toolkit walks you through. It ends with documented decisions and a policy starting point your organization can actually use.
Start With the Free Toolkit
Step-by-step guided worksheets and practical decision frameworks for surfacing where AI is already showing up in your organization, evaluating vendor and platform risk, setting clear internal rules, and building a first draft of your AI policy.
Ready to Go Further?
If working through the toolkit surfaces questions that need more than a workbook, or if your organization is already further along and needs ongoing support, that is what the retainer is for.
The Mission-Driven Tech Strategy Retainer gives nonprofit leaders a steady, practical way to govern AI decisions as part of a broader technology strategy. Not a one-time engagement. An ongoing partnership.
Common Questions
Are you anti-AI?
No. AI can be genuinely useful for nonprofits. The goal is not to avoid it. The goal is to use it intentionally, with appropriate safeguards, in ways that hold up when someone asks you to explain your decisions.
Do we need a big policy before we can do anything?
No. Start with what you know. Document what is already happening, set a few clear rules, and build from there. A simple policy your team actually follows is worth more than a comprehensive one nobody reads.
What if we are already using ChatGPT or other tools informally?
That is exactly the situation this toolkit is designed for. The starting point is not to stop. The starting point is to get clear on what information is going in, what the tool can do with it, and what rules your team needs.
What if this reveals problems we are not sure how to handle?
That happens. The toolkit is designed to flag when something needs more than a workbook: a legal review, a compliance conversation, or outside technical support. Knowing you have a gap is better than not knowing.
EXPLORE THE FULL SERIES
Lisa Montague is Partner and CEO at Coat Rack, a nonprofit technology consulting firm based in Cedar City, Utah.