Part of the Charity Software Guide
Charity May 2026 11 min read

Charity Data Management: When to Move Beyond Spreadsheets (and What to Move To)

There is a moment every growing charity recognises. The spreadsheet that held everything together for the first three years is now slowing you down. Donor records are duplicated. A Subject Access Request arrives and nobody can say with certainty where all the data lives. Funder reports take a week of copying and pasting. The problem is rarely that spreadsheets are bad. The problem is that the organisation has outgrown them, and the gap between "spreadsheet" and "full CRM" feels like a cliff edge. This guide maps out the middle ground.

Speak to us about charity software · +44 7494 618 651 · Mon to Fri, 9am to 6pm

30%
of UK charities have no CRM at all (Teque)
68%
of small charities at early-stage digital maturity (Charity Digital Skills Report 2025)
88%
of spreadsheets contain at least one error (Salesforce research)

The State of Charity Data Management in the UK

The numbers paint a clear picture. Nearly a third of UK charities manage their contacts in spreadsheets, email inboxes, and paper files, with no CRM at all. The average digital maturity score across the sector is 5.1 out of 10, and only 14% of charities describe themselves as digitally advanced. Over 75% report low data literacy across their organisations.

These are not signs of failure. They reflect the reality that most small charities have one to five staff handling data alongside everything else, on tight budgets, with limited time for training or system changes. Spreadsheets are free, familiar, and flexible. They do not require a procurement process or a board paper. For a charity with 50 contacts and a single funder, a spreadsheet is perfectly adequate.

The trouble starts when the organisation grows but the data infrastructure does not. A charity that started with one spreadsheet now has twelve. Each team member has their own version. The file naming has descended into "Donors_FINAL_v3_USE_THIS_ONE.xlsx" territory, and nobody is sure which copy is the master record.

Eight Signs Your Charity Has Outgrown Spreadsheets

If three or more of the following feel familiar, your data management approach is holding the organisation back.

  1. Duplicate records are accumulating silently. The same donor appears three times with slightly different details. The same beneficiary is recorded under two spellings of their name. Nobody is sure which record is current, and every duplicate is a GDPR risk: if someone requests data deletion and a duplicate is missed, you have a compliance problem.
  2. Each team member has their own spreadsheet. Fundraising has one version, service delivery has another, and the CEO has a third that may or may not be up to date. When the board asks for a number, it depends on which spreadsheet you open.
  3. Funder reports take days or weeks to compile. Staff manually copy data between spreadsheets, reformat columns, cross-reference against other files, and still cannot be confident the figures are accurate. A task that should take an hour consumes a full working week.
  4. GDPR requests cause panic. A Subject Access Request arrives and nobody can confidently say they have found every record for that individual across every spreadsheet, email thread, and shared drive. The one-month response deadline feels impossible.
  5. Data entry errors are routine. Postcodes in phone number fields. Dates in three different formats. Free-text fields where dropdown lists should be. Reports built on this data are unreliable, and staff have learned not to trust them.
  6. There is no audit trail. Nobody can see who changed what, or when. If a record is deleted or overwritten, it is gone. There is no way to trace how a figure in last year's report was calculated.
  7. Multiple systems with no connection. Donor data in one spreadsheet, volunteer rotas in another, case notes in a Word document, communications in Mailchimp. Nothing talks to anything else. Staff re-enter the same information in multiple places.
  8. Impact reporting is guesswork. The charity cannot demonstrate outcomes to funders because the data was never structured to support it. Outputs (how many sessions were delivered) are recorded, but outcomes (what changed as a result) are not.
The hidden cost of spreadsheet reliance. Research from Teque found that a charity with an income of around 1.2 million, 2,000 donors, and a fundraising team of three typically spends 26 hours per week on tasks that could be automated. That equates to roughly 20,000 in annual staff costs spent on manual data handling. The system is "free" but the labour is not.

What GDPR Actually Requires (and Where Spreadsheets Fall Short)

GDPR is not optional for charities. Every organisation processing personal data (donor details, beneficiary records, volunteer information) must comply. The obligations that matter most for data management decisions are these.

Lawful basis for processing

Before processing any personal data, your charity must identify one of six lawful bases under Article 6. The most relevant for charities are consent (for marketing communications), contract (for volunteer agreements or service delivery), legal obligation (for Gift Aid records, safeguarding data, employment records), and legitimate interests (often used for donor communications, but requiring a documented balancing test). A spreadsheet does not record which lawful basis applies to each data type. A properly configured CRM does.

Data retention

Charities must have a documented data retention policy. HMRC requires Gift Aid records to be kept for six years. Safeguarding records may need longer retention. But spreadsheets make retention enforcement nearly impossible. Data does not expire, nobody reviews it systematically, and deletion is manual. A donor who gave once in 2018 and asked to be removed in 2020 may still appear in three different spreadsheets because nobody thought to check all of them.

Subject Access Requests

Under GDPR, anyone can request a copy of all personal data your charity holds about them. You must respond within one calendar month. A valid SAR does not require any specific form of words. With data scattered across multiple spreadsheets, email threads, shared drives, and third-party tools, responding fully within that deadline is extremely difficult. A centralised system with search functionality makes it manageable.

GDPR enforcement is real. The ICO's average fine jumped from around 150,000 to over 2.8 million in 2025 (URM Consulting analysis). The ICO has fined charities directly: Birthlink received a fine for failing to apply appropriate security measures. Spreadsheets lack the access controls, audit trails, and encryption capabilities that GDPR expects.

For more on how donor data intersects with Gift Aid compliance, see our guide to donor management and Gift Aid compliance.

What Funders and the Charity Commission Expect from Your Data

Data management is not just an internal efficiency question. External bodies require structured, accurate data from your charity, and those requirements are increasing.

Funder reporting

Funders typically require five types of evidence: output data (what you delivered), outcome data (what changed as a result), financial reporting (how the money was spent), case studies, and beneficiary feedback. Outcome data is what funders value most, and it is where most charities struggle. If your spreadsheets only capture outputs (number of sessions, number of attendees), you are missing the data funders actually want to see.

Charity Commission annual return

All charities with income above 10,000 (and all CIOs regardless of income) must submit an annual return within 10 months of their financial year end. The return requires confirmed charity details for the public register, financial information covering income and spending, and a serious incidents declaration. Charities that rely on spreadsheets often struggle to produce consistent year-on-year figures because data structures change, columns are added or removed, and historical data is not preserved cleanly.

New SORP impact reporting (January 2026)

The new Charities SORP rules introduce tiered impact reporting based on income. Tier 1 (under 500,000) has lighter requirements. Tier 2 (500,000 to 15 million) requires more detailed reporting. Tier 3 (over 15 million) requires comprehensive impact evidence. This increases the data burden across the sector, and charities without structured data systems will find it difficult to comply efficiently.

The Options Between Spreadsheets and Full CRM

The decision is not binary. There is a spectrum of options between "the spreadsheets we already have" and "a full enterprise CRM," and the right choice depends on your charity's size, complexity, and budget.

Tier 1: Structured spreadsheets (free, immediate)

Before replacing your spreadsheets, consider whether the problem is the tool or the lack of structure. Google Sheets with data validation rules, dropdown lists, protected ranges, and controlled sharing permissions is a meaningful step up from an unstructured Excel file emailed between colleagues. Google Forms feeding directly into Sheets can standardise data entry.

Best for: Charities with fewer than 200 records, one to two staff handling data, and simple reporting needs.

Limitations: No relational data, no audit trail, no automated deduplication, limited GDPR compliance tooling.

Tier 2: Spreadsheet-database hybrids (free to low cost)

Tools like Airtable, Baserow, Grist, and NocoDB look like spreadsheets but behave like databases. They support relational fields, multiple views, and basic automation. Airtable offers a 50% nonprofit discount. Baserow and NocoDB are open-source and can be self-hosted for full data control, which is directly relevant to GDPR.

Best for: Charities with 200 to 2,000 records, multiple staff needing access, basic reporting and filtering needs, tight budgets.

Limitations: Not purpose-built for charities. No built-in Gift Aid, fundraising, or case management features. Requires some setup effort.

Tier 3: Purpose-built charity CRMs

This is where the market splits into two distinct categories, and understanding the split matters more than any individual product comparison.

Fundraising CRMs (Beacon, Donorfy) are designed around the donor relationship: who gave what, when, how much, and how to cultivate repeat giving. They handle Gift Aid, donation tracking, campaign management, and supporter communications.

Service delivery CRMs (Charitylog, Lamplight, Plinth) are designed around the beneficiary relationship: who needs support, what services were provided, what referrals were made, and what outcomes were achieved.

Platform Focus Starting Price Best For
Beacon CRM Fundraising. Gift Aid with HMRC integration. Rated #1 in Fundraising Magazine six years running. From ~£32.50/month (up to 2,000 constituents) Small to mid-sized fundraising charities
Donorfy Donor management. ISO certified. Online donation pages, Gift Aid, payment processor integration. Free for 500 contacts; paid from ~£39/month Charities starting with digital donor management
Charitylog Service delivery. Client outcomes, referrals, service usage. Income-based pricing. Unlimited users. Income-based (unlimited user licences) Advice, housing, and support charities
Lamplight Outcomes measurement. Strong reporting by ward, borough, service, demographics. No per-user charges. From ~£15/project/month Charities focused on proving impact to funders
Plinth Case management with AI admin tools. Grant management module. Purpose-built for service delivery. Free case management tier; grant management from £2,500/year Service delivery charities wanting a modern, free starting point

For a deeper look at how these platforms compare on features, pricing, and limitations, see our detailed comparison of UK charity CRM platforms.

The fundraising vs service delivery divide. Most charities need elements of both. A homelessness charity tracks the people it supports (case management) and the people who fund that support (donor management). Most off-the-shelf CRMs handle one side well and the other poorly. This is the structural gap in the charity CRM market, and it drives much of the spreadsheet reliance that persists alongside CRM systems.

Tier 4: Enterprise and bespoke systems

Salesforce Nonprofit Cloud offers 10 free licences for nonprofits. But the total cost of ownership, once you factor in implementation, customisation, add-ons, and ongoing administration, typically runs 10,000 to 30,000 or more annually for a mid-sized charity. The platform is powerful but requires dedicated admin capacity that most small charities do not have.

Bespoke systems take a different approach. Instead of adapting your workflows to fit a generic platform, the system is built to match how your organisation actually operates. Donor management and case management in a single data model. No per-user fees penalising volunteer access. Reporting designed for your specific funders and board. You own the code and data outright.

This is not the right path for every charity. Small organisations with standard fundraising needs will be well served by Beacon or Donorfy at a fraction of the cost. But for charities whose operations span both fundraising and service delivery, or whose workflows do not fit any off-the-shelf category, a bespoke system can be more cost-effective over five years than the combination of platforms and workarounds they are currently maintaining. For a full analysis of when that trade-off makes sense, see our article on when bespoke charity software makes more sense than off-the-shelf.

How to Choose the Right Level for Your Charity

The decision is less about features and more about where your organisation sits on four dimensions.

  • Record count. Under 200 records: structured spreadsheets can work. 200 to 2,000: a hybrid tool like Airtable gives you relational data without CRM complexity. Over 2,000: a purpose-built CRM is almost certainly needed.
  • Staff and volunteer count. Per-user pricing models penalise charities that rely on volunteers. If you have 15 volunteers who need system access, income-based pricing (Charitylog) or flat-rate pricing matters.
  • Reporting requirements. If your funders accept a simple spreadsheet summary, Tier 1 or 2 may suffice. If they require outcome data, demographic breakdowns, and longitudinal evidence, you need a system designed to capture and report on that data.
  • Budget reality. 69% of charities cite finances as their primary barrier to digital progress. But "free" tools carry hidden costs in staff time. The 26 hours per week that a mid-sized charity spends on manual data tasks is real money. A CRM costing 5,000 per year that saves 20,000 in staff time is not an expense. It is a saving.

Stay with spreadsheets if:

  • Fewer than 200 records total
  • One to two staff handling all data
  • Single funder with simple reporting
  • No beneficiary case management
  • Minimal GDPR exposure

Move to a system if:

  • Duplicate records are a known problem
  • Multiple staff or volunteers need access
  • Funders require outcome data
  • GDPR requests take days to fulfil
  • Reports require manual consolidation

Making the Transition Without Losing Data (or Your Mind)

The biggest risk in moving from spreadsheets to a system is not the technology. It is the transition itself. Data migrations fail when charities try to move everything at once, without cleaning the data first, and without giving staff time to learn the new system.

Start with a data audit

Before choosing any platform, map every spreadsheet, document, and system that holds personal or operational data. Identify duplicates. Flag records that should have been deleted under your retention policy. This audit is valuable regardless of what you decide to do next, and it is a GDPR obligation you probably already have.

Migrate one data type first

Do not try to move donors, beneficiaries, volunteers, and grant records all at once. Pick the data type that causes the most pain (usually donor records or case management data) and migrate that first. Run the old spreadsheet and the new system in parallel for a defined period. Once the team is confident, move to the next data type.

Training is the real bottleneck

50% of charities say funding for staff and volunteer training on digital tools is needed, up from 43% the previous year. The best system in the world fails if staff revert to spreadsheets because nobody showed them how the new system works. Build training time into the migration plan, not as an afterthought.

What Comes After the Spreadsheet

Moving from spreadsheets to structured data management is not just about compliance or efficiency. It changes what your charity can see. Instead of guessing at impact, you can demonstrate it. Instead of spending a week on funder reports, you generate them in minutes. Instead of hoping that SAR response found every record, you search once and know.

The path from spreadsheets to systems does not have to be a cliff edge. Structured spreadsheets, hybrid tools, purpose-built CRMs, and bespoke systems each serve a different stage of organisational growth. The right choice is the one that matches where your charity is now, with enough flexibility to support where it is going.

If your charity spans both fundraising and service delivery, and the off-the-shelf options leave you managing half your data in spreadsheets anyway, that is exactly the problem a bespoke system is designed to solve. See our guide to charity software built around your workflows.

Speak to us about charity software · +44 7494 618 651 · Mon to Fri, 9am to 6pm