One day AI is being called the future of everything, and the next there is a headline that makes it sound unpredictable, unsafe, or too complicated to trust. If you lead an organization where the work genuinely makes an impact, we understand why that makes you nervous. Your job isn’t to follow technology trends. It’s to protect the trust people have placed in you, and that’s a very different responsibility.

The honest answer to all the noise is a little simpler than it first appears.

AI Is a Mirror, Not a Mind
Recently, a published investigation into an AI safety incident made waves. In a controlled test, a language model appeared to act manipulatively to avoid being shut down, and people described the behaviour as disturbing, alarming, even human.

But the system wasn’t acting on ambition or self-preservation. It was drawing on the patterns in everything it had been trained on, our stories, our fears, and years of science fiction about rogue machines. We essentially taught it those patterns. It didn’t invent the behaviour. It reflected it.

We have seen this before. Social media amplifies outrage because outrage keeps people engaged. Recommendation engines push emotionally charged content because strong reactions keep people online. These systems don’t care about the outcomes they create, and neither does AI. It can sound confident and considered, but it doesn’t understand consequence and it doesn’t carry responsibility for what happens next.

People do.

What’s Actually at Stake
You are not using technology in the abstract. You are using it to hold real information about real people, the records, communications, and systems that keep everything running, often under tight budgets and with teams already stretched thin. Here in BC, many organizations are managing all of this alongside growing service demands and a funding climate that leaves little room for error.

So when new technology arrives promising to help, the real question isn’t whether it’s impressive. It’s whether it is safe enough, stable enough, and guided carefully enough to trust with the work you have spent years building.

The Real Risk Is Removing People From the Process
The risk isn’t technology acting unpredictably on its own. It’s what happens when oversight disappears, when tools are used without boundaries, outputs go unreviewed, and speed becomes more important than care. A system can optimize for results while remaining completely indifferent to the harm those results cause. That indifference is the problem, not the technology itself.

Moving Forward
The future of AI will be shaped by the values we build into it, the safeguards we put around it, and the everyday choices we make about what matters more than efficiency. AI can be genuinely useful in the background, helping with drafts, summaries, planning, and administrative work that eats up time better spent elsewhere. But it doesn’t replace judgment, accountability, or the human responsibility at the centre of meaningful work. That part stays with us.

When Small Tech Issues Start Taking Up Your Time
You walk in on Monday ready to move your mission forward, but within the first hour something small pulls you off track. Someone can’t access the donor system, email isn’t syncing, or a tool your team relies on isn’t working the way it should.
None of it feels like a major issue, but it’s enough to shift your focus. Instead of planning, leading, or connecting with donors, you find yourself troubleshooting or helping someone else do it. You didn’t step into this role to manage IT, yet somehow it keeps finding its way back onto your plate.

The Real Problem Isn’t One Big Failure
Most nonprofits don’t deal with major system breakdowns. What they deal with is constant friction, where systems that almost work, processes that take longer than they should, and small inefficiencies quietly become part of the day.

Over time, that starts to look like:
• Staff losing time on things that should be simple
• Workarounds replacing proper processes
• Ongoing worry about whether your data is actually secure
• A constant, low-level distraction that never really goes away

It’s not dramatic, but it’s exhausting. And it slowly pulls energy away from the work that actually matters, especially when there isn’t a clear way of managing everything together.

Contact Us

What This Should Feel Like Instead
At its best, technology is quiet and reliable. It supports your team in the background so you can focus on your mission without interruption.
That means fewer workarounds, fewer disruptions, and fewer moments where you’re pulled into problems you shouldn’t have to solve. It means walking into your day with clarity instead of bracing for what might go wrong.
Because your work is already complex enough. The systems behind it shouldn’t make it harder.

A Simple Gut Check
If you’re not sure whether this is just “normal” or something worth addressing, it helps to step back and look at the bigger picture.
Are tech issues a regular part of your week, and has your setup ever been looked at as a whole rather than adjusted piece by piece over time? If the answer is yes to the first and no to the second, then what you’re experiencing isn’t just bad luck. It’s a system that was never fully designed to support the way your team works today.

Let’s Take It Off Your Plate
You shouldn’t have to figure this out on your own. And you definitely shouldn’t have to carry it while also leading your organization.
If you’re ready for technology to feel simple, reliable, and out of your way, we can help you get there. We work with nonprofits to make sense of what’s already in place, reduce day-to-day friction, and make sure everything is working together the way it should.

Let’s have a conversation about what’s working, what’s not, and how to make your day easier.

Passwords Matter. But How You Use Them Matters Even More
Picture walking into your office in the morning, setting your things down, and getting ready for the day. Everything looks normal, nothing feels out of place, and work begins as usual. Now imagine the door wasn’t forced open the night before. It didn’t need to be, because the key was simply easy to find.
That’s how most security issues happen. Not dramatic or targeted, just small gaps that are easy to take advantage of when no one is looking.
For many nonprofits and charities, especially as their systems grow over time, this is exactly how problems start.
________________________________________
The Real Issue Usually Starts Somewhere Else
For most organizations, a security issue doesn’t begin inside their own systems.
It often starts with something small and forgettable, like a donation platform you used once, a vendor tool that is no longer top of mind, or a subscription tied to a former team member. If that system is ever compromised, the login details connected to it can be exposed without you ever knowing.
From there, automated tools quietly try those same credentials in other places, including email, cloud platforms, and internal systems. If a password has been reused, access becomes much easier than it should be.
This is something we see often in nonprofit IT support environments, because systems tend to grow over time without a clear reset point.
________________________________________
Why “Strong” Doesn’t Always Mean “Safe”
It’s completely reasonable to feel confident about passwords that follow best practices, especially when they include a mix of letters, numbers, and symbols.
The challenge is that strength on its own is no longer the deciding factor.
A well-constructed password can still create problems if it is used across multiple accounts, because the moment one system is exposed, anything sharing that password becomes more vulnerable as well.
At the same time, modern attacks are automated and efficient, which means they are designed to take advantage of small overlaps like reused credentials rather than trying to guess passwords one by one.
So the goal is not just stronger passwords, but making sure each system is managed independently as part of a broader approach to IT.
________________________________________
What Actually Makes a Difference
The good news is that improving this does not require complicated changes.
A password manager helps create and store a unique password for every account, so there is no overlap between systems. Your team does not need to remember dozens of passwords, and there is no need to reuse them just to stay efficient.
Multi-factor authentication adds a second layer by requiring something beyond the password, such as a prompt on a phone or a temporary code. This ensures that even if a password is exposed somewhere, it is not enough on its own.
Together, these steps reduce risk in a practical way and are a core part of how technology should support nonprofit teams day to day.
________________________________________
A Timely Reason To Take a Look
With World Password Day coming up this week, it is a natural moment to pause and take a quick look at how things are set up.
If each account in your organization has its own password and multi-factor authentication is already in place, you are in a strong position. If there are still shared or reused passwords, or systems with only one layer of protection, that is simply an opportunity to improve things step by step.
Most security issues are not caused by complex scenarios, but by small, fixable gaps that are easy to overlook until they matter.
________________________________________
If you are unsure where things stand, we are always happy to walk through it with you in plain language and at your pace. Give us a call.

The Hard Truth: No System Is 100% Unbreakable

Cybersecurity is like locking your doors, and training your team to spot suspicious activity. But even the best precautions can’t promise perfection. What matters most is how prepared you are, how quickly you respond, and who shares the responsibility when things go wrong.

Shared Responsibility: What IT Support Really Means

In most nonprofit/IT relationships, accountability is shared between the organization (you) and the service provider (IT provider).

🧩 Your Responsibilities:

• Choosing strong passwords and enabling multi-factor authentication (MFA)
• Training staff to avoid phishing scams and unsafe clicks
• Following data policies and access guidelines
• Reporting suspicious behavior or incidents immediately

🛡️Your Tech’s Responsibilities:

• Monitoring systems for threats 24/7
• Keeping software and security tools up to date
• Backing up data and testing recovery procedures
• Advising you on best practices and compliance requirements
• Responding fast when something goes wrong

A good IT provider won’t just sell you antivirus software—they’ll act as a partner in prevention and a first responder in a crisis.

What Happens If a Breach Occurs?

1. Detection
   The MSP should identify the breach quickly, alert your team, and begin investigating.
2. Containment
   They’ll isolate affected systems and limit further exposure.
3. Recovery
   They’ll restore from backups (if they’ve been tested) and guide your team through cleanup.
4. Reporting
   Depending on what was exposed, your nonprofit may be legally required to notify donors, partners, or regulators.

This is why clear roles and a written incident response plan are vital. You don’t want to be Googling “data breach response” at midnight.

Who’s Legally Responsible?

It depends on your contract and local laws, but generally:

• Your organization is ultimately responsible for how donor data is handled.
• Your IT support is responsible for the tools, systems, and services they manage.
• If a breach results from negligence on either side, that party may be liable.

That’s why your agreement with your IT service should clearly define:

• Security responsibilities
• Data access protocols
• Service Level Agreements (SLAs)
• Breach notification timelines

Don’t Just Outsource—Collaborate

Your IT support should be more than just tech support. With co-managed IT services, they become strategic partners Who: 

• Help build your data policies
• Train your team
• Provide breach drills or “what-if” scenarios
• Keep you compliant with regulations like PIPEDA and CRA requirements

It’s not just about blame. It’s about building a resilient, trusted partnership.

Nonprofits like yours deal in trust. A data breach doesn’t just threaten your systems, it threatens your credibility. But with the right IT support partner by your side, you’re not alone. You have guidance, protection, and someone who speaks your language.  Human IT understands the unique pressures nonprofits face—and they’re here to help you stay safe while you stay focused on what matters.

Contact us

What AI Chatbots Are Doing with Your Data

Every time you type a message to a chatbot, you’re sharing more than words. You’re handing over insights—some of them private, some of them mission-critical.

Let’s make this simple:

• ChatGPT collects your prompts and usage data. These can be used to improve services—and may be shared with vendors.

• Google Gemini stores data for up to three years. Even deleted entries might linger in systems used to train AI.

• Microsoft Copilot tracks browsing and app use, sometimes sharing with third parties.

• DeepSeek, a newer platform, stores your chat history and typing patterns—on servers based in China.

Now ask yourself: Would you share that kind of access with a stranger?

For nonprofits handling sensitive donor information, financial data, or details of vulnerable communities, the stakes couldn’t be higher. A single breach could jeopardize trust, funding, and the very communities you aim to serve.

Why This Hits Nonprofits Harder

We’re not just protecting data—we’re protecting trust. That includes:

• Donor relationships built over years

• Client confidentiality in sensitive programs

• Board confidence in your digital maturity

A breach doesn’t just cost money. It can cost your mission. And the grief of explaining it to a stakeholder who believed in you? That’s a weight no spreadsheet can carry. These risks aren’t hypothetical; they’re already happening. And as nonprofits adopt these tools without full knowledge of their implications, they unintentionally expose themselves to vulnerabilities that could take years to repair.

Real Risks, Real Consequences

Let’s name the fear so we can move through it:

• Data breaches: In 2024, DeepSeek suffered a breach due to poor cloud configurations. If it can happen to them, it can happen to anyone.

• Noncompliance fines: Canadian nonprofits must follow privacy laws like PIPEDA. Violating them—even unintentionally—can lead to legal action or lost funding.

• Reputation damage: A leaked donor list can unravel years of relationship-building.

You don’t need panic. You need a plan.

5 Ways to Keep Your Nonprofit Safe While Using AI Tools

Here’s what matters. And what doesn’t:

✅ Choose wisely: Stick with tools that let you control data retention. Ask about compliance with Canadian privacy standards.

✅ Limit what you share: Never input names, financial info, or personal data unless the tool is vetted and encrypted.

✅ Adopt a Zero-Trust model: Only authorized users should access AI platforms—and only for specific tasks.

✅ Train your team: Most breaches come from small mistakes. Help your staff understand what not to type.

✅ Review compliance regularly: Work with a local MSP familiar with PIPEDA, CRA, and nonprofit-specific needs.

Balancing Innovation and Security

Tech is supposed to make your life easier—not scarier.

If your AI tools are saving you time but keeping you up at night, something’s off. Let’s fix that, together. At our Managed service Company here in Vancouver, we specialize in helping nonprofits like yours feel confident, secure, and supported.

Want to assess your organization’s digital security? Start with a FREE Security Assessment today and ensure your nonprofit is safeguarded against modern cyber threats.

CONTACT US