Part of the Charity Software Guide
Charity 30 July 2026 11 min read

Charity Data: When to Move Beyond Spreadsheets

There is a moment every growing charity recognises. The spreadsheet that held everything together for the first three years is now slowing you down. Donor records are duplicated. A Subject Access Request arrives and nobody can say with certainty where all the data lives. Funder reports take a week of copying and pasting. The problem is rarely that spreadsheets are bad. The problem is that the organisation has outgrown them, and the gap between "spreadsheet" and "full CRM" feels like a cliff edge. This guide maps out the middle ground.

Connect with us about charity software · · Replies within 24 hours

30%
of UK charities have no CRM at all (Teque)
68%
of small charities at early-stage digital maturity (Charity Digital Skills Report 2025)
88%
of spreadsheets contain at least one error (Salesforce research)

The State of Charity Data Management in the UK

The numbers paint a clear picture. Nearly a third of UK charities manage their contacts in spreadsheets, email inboxes, and paper files, with no CRM at all. The average digital maturity score across the sector is 5.1 out of 10, and only 14% of charities describe themselves as digitally advanced. Over 75% report low data literacy across their organisations.

These are not signs of failure. Most small charities have one to five staff who handle data next to everything else. The budget is tight. There is little time for training, or for a change of system. Spreadsheets are free, familiar, and flexible. They do not require a procurement process or a board paper. For a charity with 50 contacts and a single funder, a spreadsheet is perfectly adequate.

The trouble starts when the organisation grows but the data infrastructure does not. A charity that started with one spreadsheet now has twelve. Each team member has their own version. The file naming has descended into "Donors_FINAL_v3_USE_THIS_ONE.xlsx" territory, and nobody is sure which copy is the master record.

Eight Signs Your Charity Has Outgrown Spreadsheets

If three or more of the following feel familiar, your data management approach is holding the organisation back.

  1. Duplicate records are accumulating silently. The same donor appears three times with slightly different details. The same beneficiary is recorded under two spellings of their name. Nobody knows which record is the current one. Every copy is a GDPR risk. A person asks you to delete their data, you miss one copy, and you have broken the rules.
  2. Each team member has their own spreadsheet. Fundraising has one version, service delivery has another, and the CEO has a third that may or may not be up to date. When the board asks for a number, it depends on which spreadsheet you open.
  3. Funder reports take days or weeks to compile. Staff manually copy data between spreadsheets, reformat columns, cross-reference against other files, and still cannot be confident the figures are accurate. A task that should take an hour consumes a full working week.
  4. GDPR requests cause panic. A Subject Access Request arrives. Nobody can say for certain that they found every record for that person. The records are in spreadsheets, in email and on a shared drive. The one-month response deadline feels impossible.
  5. Data entry errors are routine. Postcodes in phone number fields. Dates in three different formats. Free-text fields where dropdown lists should be. Reports built on this data are unreliable, and staff have learned not to trust them.
  6. There is no audit trail. Nobody can see who changed what, or when. If a record is deleted or overwritten, it is gone. There is no way to trace how a figure in last year's report was calculated.
  7. Multiple systems with no connection. Donor data in one spreadsheet, volunteer rotas in another, case notes in a Word document, communications in Mailchimp. Nothing talks to anything else. Staff re-enter the same information in multiple places.
  8. Impact reporting is guesswork. The charity cannot show its outcomes to a funder because the data was never structured to support it. Outputs (how many sessions were delivered) are recorded, but outcomes (what changed as a result) are not.
The hidden cost of spreadsheet reliance. Teque studied a charity with an income of about 1.2 million, 2,000 donors and three fundraising staff. It spends 26 hours a week on work a system could do. That equates to roughly 20,000 in annual staff costs spent on manual data handling. The system is "free" but the labour is not.

What GDPR Actually Requires (and Where Spreadsheets Fall Short)

GDPR is not optional for charities. Every organisation processing personal data (donor details, beneficiary records, volunteer information) must comply. The obligations that matter most for data management decisions are these.

Lawful basis for processing

Before processing any personal data, your charity must identify one of six lawful bases under Article 6. Four of them matter most to a charity. Consent, for marketing. Contract, for a volunteer agreement or a service. Legal obligation, for Gift Aid records, safeguarding data and employment records. Legitimate interests, often used for donor letters, which needs a written balancing test. A spreadsheet does not record which lawful basis applies to each data type. A properly configured CRM does.

Data retention

Charities must have a documented data retention policy. HMRC requires Gift Aid records to be kept for six years. Safeguarding records may need longer retention. But spreadsheets make retention enforcement nearly impossible. Data does not expire, nobody reviews it systematically, and deletion is manual. A donor gave once in 2018, and asked to be removed in 2020. They may still sit in three spreadsheets, because nobody checked all of them.

Subject Access Requests

Under GDPR, anyone can request a copy of all personal data your charity holds about them. You must respond within one calendar month. A valid SAR does not require any specific form of words. With data scattered across multiple spreadsheets, email threads, shared drives, and third-party tools, responding fully within that deadline is extremely difficult. A centralised system with search functionality makes it manageable.

GDPR enforcement is real. The ICO's average fine jumped from around 150,000 to over 2.8 million in 2025 (URM Consulting analysis). The ICO has fined charities directly: Birthlink received a fine for failing to apply appropriate security measures. Spreadsheets lack the access controls, audit trails, and encryption capabilities that GDPR expects.

For more on how donor data intersects with Gift Aid compliance, see our guide to donor management and Gift Aid compliance.

What Funders and the Charity Commission Expect from Your Data

Data management is not just an internal efficiency question. External bodies require structured, accurate data from your charity, and those requirements are increasing.

Funder reporting

A funder usually asks for five kinds of evidence. What you delivered. What changed because of it. How you spent the money. Case studies. What the people you helped said. Outcome data is what funders value most, and it is where most charities struggle. If your spreadsheets only capture outputs (number of sessions, number of attendees), you are missing the data funders actually want to see.

Charity Commission annual return

Every charity with an income above 10,000 must send an annual return. So must every CIO, at any income. It is due 10 months after the end of the financial year. The return requires confirmed charity details for the public register, financial information covering income and spending, and a serious incidents declaration. A charity on spreadsheets often cannot give the same figures from year to year. The shape of the data changes. Somebody adds or removes a column. The old data is not kept cleanly.

New SORP impact reporting (January 2026)

The new Charities SORP rules introduce tiered impact reporting based on income. Tier 1 (under 500,000) has lighter requirements. Tier 2 (500,000 to 15 million) requires more detailed reporting. Tier 3 (over 15 million) requires comprehensive impact evidence. This increases the data burden across the sector, and charities without structured data systems will find it difficult to comply efficiently.

The Options Between Spreadsheets and Full CRM

The decision is not binary. There is a range between the spreadsheets you already have and a full company CRM. The right choice depends on the size of your charity, on how complex it is, and on your budget.

Tier 1: Structured spreadsheets (free, immediate)

Before replacing your spreadsheets, consider whether the problem is the tool or the lack of structure. Google Sheets can check what people type, offer dropdown lists, protect cells, and control who sees what. That is a real step up from an Excel file that people email to each other. Google Forms feeding directly into Sheets can standardise data entry.

Best for: Charities with fewer than 200 records, one to two staff handling data, and simple reporting needs.

Limitations: No relational data, no audit trail, no automated deduplication, limited GDPR compliance tooling.

Tier 2: Spreadsheet-database hybrids (free to low cost)

Tools like Airtable, Baserow, Grist, and NocoDB look like spreadsheets but behave like databases. They support relational fields, multiple views, and basic automation. Airtable offers a 50% nonprofit discount. Baserow and NocoDB are open-source and can be self-hosted for full data control, which is directly relevant to GDPR.

Best for: Charities with 200 to 2,000 records, multiple staff needing access, basic reporting and filtering needs, tight budgets.

Limitations: Not purpose-built for charities. No built-in Gift Aid, fundraising, or case management features. Requires some setup effort.

Tier 3: Purpose-built charity CRMs

This is where the market splits into two distinct categories, and understanding the split matters more than any individual product comparison.

Fundraising CRMs (Beacon, Donorfy) are designed around the donor relationship: who gave what, when, how much, and how to cultivate repeat giving. They handle Gift Aid, donation tracking, campaign management, and supporter communications.

Service delivery CRMs such as Charitylog, Lamplight and Plinth are built around the person you help. Who needs support. What you gave them. Where you referred them. What changed.

Platform Focus Starting Price Best For
Beacon CRM Fundraising. Gift Aid with HMRC integration. Rated #1 in Fundraising Magazine six years running. From ~£32.50/month (up to 2,000 constituents) Small to mid-sized fundraising charities
Donorfy Donor management. ISO certified. Online donation pages, Gift Aid, payment processor integration. Free for 500 contacts; paid from ~£39/month Charities starting with digital donor management
Charitylog Service delivery. Client outcomes, referrals, service usage. Income-based pricing. Unlimited users. Income-based (unlimited user licences) Advice, housing, and support charities
Lamplight Outcomes measurement. Strong reporting by ward, borough, service, demographics. No per-user charges. From ~£15/project/month Charities focused on proving impact to funders
Plinth Case management with AI admin tools. Grant management module. Purpose-built for service delivery. Free case management tier; grant management from £2,500/year Service delivery charities wanting a modern, free starting point

For a deeper look at how these platforms compare on features, pricing, and limitations, see our detailed comparison of UK charity CRM platforms.

The fundraising vs service delivery divide. Most charities need elements of both. A homelessness charity tracks the people it supports (case management) and the people who fund that support (donor management). Most off-the-shelf CRMs handle one side well and the other poorly. This is the structural gap in the charity CRM market, and it drives much of the spreadsheet reliance that persists alongside CRM systems.

Tier 4: Enterprise and bespoke systems

Salesforce Nonprofit Cloud offers 10 free licences for nonprofits. The whole cost is larger. Add the set-up, the changes you need, the extra parts and the person who runs it. A mid-sized charity usually pays 10,000 to 30,000 a year, or more. The platform is powerful but requires dedicated admin capacity that most small charities do not have.

Bespoke systems take a different approach. Instead of adapting your workflows to fit a generic platform, the system is built to match how your organisation actually operates. Donor management and case management in a single data model. No per-user fees penalising volunteer access. Reporting designed for your specific funders and board. You own the code and data outright.

This is not the right path for every charity. Small organisations with standard fundraising needs will be well served by Beacon or Donorfy at a fraction of the cost. Some charities do both fundraising and service delivery. Others work in a way that fits no ready-made group. Those charities now keep several platforms, and several ways round the gaps. A system of their own can cost less than that over five years. For a full analysis of when that trade-off makes sense, see our article on when bespoke charity software makes more sense than off-the-shelf.

How to Choose the Right Level for Your Charity

The decision is less about features and more about where your organisation sits on four dimensions.

  • Record count. Under 200 records: structured spreadsheets can work. 200 to 2,000: a hybrid tool like Airtable gives you relational data without CRM complexity. Over 2,000: a purpose-built CRM is almost certainly needed.
  • Staff and volunteer count. Per-user pricing models penalise charities that rely on volunteers. If you have 15 volunteers who need system access, income-based pricing (Charitylog) or flat-rate pricing matters.
  • Reporting requirements. If your funders accept a simple spreadsheet summary, Tier 1 or 2 may suffice. If they require outcome data, demographic breakdowns, and longitudinal evidence, you need a system designed to capture and report on that data.
  • Budget reality. 69% of charities cite finances as their primary barrier to digital progress. But "free" tools carry hidden costs in staff time. The 26 hours per week that a mid-sized charity spends on manual data tasks is real money. A CRM costing 5,000 per year that saves 20,000 in staff time is not an expense. It is a saving.

Stay with spreadsheets if:

  • Fewer than 200 records total
  • One to two staff handling all data
  • Single funder with simple reporting
  • No beneficiary case management
  • Minimal GDPR exposure

Move to a system if:

  • Duplicate records are a known problem
  • Multiple staff or volunteers need access
  • Funders require outcome data
  • GDPR requests take days to fulfil
  • Reports require manual consolidation

Making the Transition Without Losing Data (or Your Mind)

The biggest risk in moving from spreadsheets to a system is not the technology. It is the transition itself. A data move fails for three reasons. The charity moves everything at once. It does not clean the data first. It does not give staff time to learn the new system.

Start with a data audit

Before choosing any platform, map every spreadsheet, document, and system that holds personal or operational data. Identify duplicates. Flag records that should have been deleted under your retention policy. This audit is valuable regardless of what you decide to do next, and it is a GDPR obligation you probably already have.

Migrate one data type first

Do not try to move donors, beneficiaries, volunteers, and grant records all at once. Pick the data type that causes the most pain (usually donor records or case management data) and migrate that first. Run the old spreadsheet and the new system in parallel for a defined period. Once the team is confident, move to the next data type.

Training is the real bottleneck

50% of charities say funding for staff and volunteer training on digital tools is needed, up from 43% the previous year. The best system in the world fails if staff revert to spreadsheets because nobody showed them how the new system works. Build training time into the migration plan, not as an afterthought.

Why the spreadsheet keeps coming back

Most charities that buy a CRM still keep spreadsheets. That is worth explaining, because it decides whether the move works.

The CRM covers one job well and the others badly, so the gaps go back into a sheet. Then a funder asks for something the CRM cannot report, and that goes into a sheet too. The spreadsheet is not a habit. It is what people use where the system does not reach.

A system reaches everywhere only when everything it holds is one set of data. On engage.re a supporter, a beneficiary, a volunteer, a donation, a case and an outcome are declared once, in one dictionary. A new funder report is then a new question against data you already hold, and not a new spreadsheet.

Each charity still owns its own system. We explain how a whole sector shares one foundation in bespoke software for a whole sector. We set out the cost in what does it cost to own and run your own systems.

What Comes After the Spreadsheet

Moving from spreadsheets to structured data management is not just about compliance or efficiency. It changes what your charity can see. You no longer guess at your impact. You can show it. Instead of spending a week on funder reports, you generate them in minutes. Instead of hoping that SAR response found every record, you search once and know.

The path from spreadsheets to systems does not have to be a cliff edge. Structured spreadsheets, hybrid tools, purpose-built CRMs, and bespoke systems each serve a different stage of organisational growth. The right choice is the one that matches where your charity is now, with enough flexibility to support where it is going.

Your charity may do both fundraising and service delivery. The ready-made choices then leave half your data in spreadsheets. A system of your own is built for exactly that problem. See our guide to charity software built around your workflows.

Connect with us about charity software · · Replies within 24 hours

Sources and further reading