Non-profits

Reduce non-profit cloud risk

Charities run on Microsoft 365 with small teams, changing volunteers and sensitive donor and beneficiary data. TENET shows which accounts, shared files and sign-ins carry the most risk, so limited time goes where it matters.

START FOR FREEREQUEST DEMO
What TENET surfacesTENET
Dormant accounts and unused licences
Anonymous and guest sharing links
Suspicious sign-ins from Entra logs
NIST CSF 2.0 gaps for trustee reporting
Where the risk sits

Exposures lean teams miss

Accounts that outlive the role

Staff move on and volunteers come and go. Their accounts, guest access and licences often stay, each one a way in and a seat still paid for.

Donor and beneficiary data shared too far

Files go to partners, funders and volunteers through links that stay live. Every forgotten link is a route out for sensitive data.

Phishing aimed at small teams

Three in ten UK charities reported a cyber breach or attack in the last year, and phishing featured in 86% of them (UK Cyber Security Breaches Survey 2025).

Access risk

Close access left behind

TENET lists licensed accounts that have gone dormant, guest accounts and identities with more access than their role needs. Since Microsoft ended its donated Business Premium grant for nonprofits in 2025, a dormant Business Premium seat is also a seat you pay for.

  • Dormant licensed accounts flagged
  • Guest and privileged access in one list
  • Unused licences found before renewal
Sample view: access left behind

former-fundraiser@

No sign-in for 120 days · licence assigned

high

volunteer-events (guest)

Guest account · access to finance site

critical

it-admin@

Privileged role · in daily use

medium

programmes-lead@

Active · access matches role

ok
Illustrative accounts, not live data
Sample view: external sharing

Donor records site

Anonymous links · owner left

critical

Beneficiary casework site

Guest links to partner agencies

high

Volunteer rota site

Guest links · recent activity

medium

Board papers site

Internal only

ok
Illustrative sites, not live data
Data risk

Find overshared files

TENET reads SharePoint and OneDrive sharing across every site and shows where anonymous and guest links point, with the site owner and last activity, so you know which link to close first.

  • Anonymous and guest links counted per site
  • Site owner and last activity alongside
  • Sites ranked by sharing risk
Identity attacks

Spot stolen credentials

A phished password shows up in sign-in activity before it shows up as a loss. TENET reads Entra sign-in and audit logs and brings forward the logins that point to a compromised account.

  • Sign-ins from places a user could not reach in time
  • Older protocols that skip multifactor checks
  • Repeated failed attempts on one account
Sample view: sign-in risk signals

Finance mailbox sign-in

Two countries within an hour

critical

Legacy mail client login

No multifactor prompt

high

Failed attempts on one account

Many tries, one mailbox

high

Office laptop sign-in

Known device and location

ok
Illustrative sign-ins, not live data
Sample view: NIST CSF 2.0 functions

Protect

Access and data controls failing

high

Identify

Asset and access inventory gaps

medium

Detect

Sign-in monitoring in place

ok
Illustrative results, not live data
Trustee reporting

Report risk to trustees

Trustees need a clear view of cyber risk, yet only three in ten UK charities have a trustee who takes explicit responsibility for it. TENET maps your Microsoft 365 and Azure findings to NIST CSF 2.0 and produces a report you can take to the board without building it by hand.

  • Findings mapped to NIST CSF 2.0
  • Progress tracked between board meetings
  • Report generated in one click

FAQs

Do you offer non-profit pricing?

Yes. We offer discounted pricing for qualifying non-profits. Contact customersupport@aesonsolutions.com for details and qualification requirements.

See the plans and pricing.

Can our IT provider run TENET for us?

Yes. If an IT provider manages your Microsoft 365, they can connect and run TENET for you. Findings are ranked by risk, so they know what to fix first.

Run the free Self-Service Assessment to see your own findings ranked by risk.

Does NIS2 apply to non-profits?

NIS2 applies by sector and size, not by legal form. A non-profit that operates in a sector the directive covers, such as health, and is medium-sized or larger may be in scope, depending on how its EU member state has transposed the directive. TENET maps Azure and Microsoft 365 findings to both NIS2 and NIST CSF 2.0.

Read how TENET supports NIS2 compliance and NIST CSF 2.0.

Does TENET change anything in our tenant?

No. TENET only reads data, through a read-only Entra application and service principal that setup creates. It does not deploy agents or make changes in your Microsoft 365 or Azure tenant.

See the Microsoft cloud integration guide for the exact roles and setup steps.

Find your Microsoft cloud risk

Connect your Azure and Microsoft 365 tenant with read-only access and see which identities, exposures and anomalies matter most.

FREE ASSESSMENTREQUEST DEMO