Whoever is in that day still has to get the records out. We document the systems we manage so they can.
When the person who knows is out and nobody else has the login, we chase that down for you.
Our managed IT has no long-term contract and no onboarding fee, and clients stay for decades anyway.
Our clients' systems are watched around the clock by a staffed security operations center, every day of the year. Very few IT companies offer that to a small business, and we do.
We do not advertise and we do not do hard sells. Almost every client has been with us more than ten years. Most have been with us about twenty.
We resell nothing and take no vendor commissions, so nobody pays us to recommend their product.
Within our scope, we document the domains and administrative accounts your business controls. That documentation is yours whenever you want a copy, including when you leave.
The donor database, the event platform, the grants tool and the giving processor were each set up at a different time by a different person. The map of how they fit together lives in somebody's head, and their last day should not take the instructions with them.
Some of those systems are closer together than they look. If you run Bloomerang, your donor CRM, your giving forms and your volunteer tool may all come from one company: Qgiv is now Bloomerang Fundraising, and Bloomerang Volunteer used to be InitLive. Ask who handles a problem between them before you need the answer.
The records are in more places than anyone planned, including the spreadsheet that started as a workaround and never stopped being one.
For the systems in our scope, we also record who can approve a change to each one, so that answer does not leave with the person who set it up.
Member and donor records carry names, addresses, giving history and sometimes household details. A former volunteer or board member should not still be able to see them years later, yet access piles up across turnover unless somebody is assigned to clear it. Access should follow the role somebody holds now, not every role they have ever held.
Online giving does not hand all of the card security to your processor, either. Even when the processor holds the card details, the PCI Security Standards Council says the organization still has to make sure that processor protects the data, and still has to validate its own compliance, typically with a self-assessment questionnaire such as SAQ A.
For the systems we agree to manage, we handle staff accounts, access and device security. Retention policy, donor and grant agreements and board-level access rules stay with your board, your finance team or your attorney.
A backup that only covers the office computer misses the media files, the donor platform, the case records and the fund accounting system that tracks each grant, such as MIP or Financial Edge NXT. We keep backups isolated from what they protect and test restores rather than trusting a green light.
Recovery also means knowing what has to come back first: a program deadline, a reporting deadline or the phones. Write that order down before a bad week, and revisit it when leadership changes.
Ask us anything. One IT question, answered straight, no charge and no pitch.
If the person who knows your donor database were unavailable tomorrow, what would stop? Send us that.
Do you already have someone doing your IT? Ask anyway. If they have it handled, that is what you will hear.
Call (817) 265-5000 or email info@bdunn.com.