
Hosted by Community IT Innovators · EN
Community IT offers free webinars monthly to promote learning within our nonprofit technology community. Our podcast is appropriate for a varied level of technology expertise. Community IT is vendor-agnostic and our webinars cover a range of topics and discussions. Something on your mind you don’t see covered here? Contact us to suggest a topic! http://www.communityit.com

Carolyn Woodard explores the technology behind nonprofit fundraising events with Justin Goodhew, CEO and co-founder of Trellis. Galas and in-person events have come roaring back since COVID, and they have changed — guests expect and enjoy more experiential, mission-centered evenings. But the pressure on staff has not let up. As AI begins to reshape data entry and reconciliation, the nonprofits that thrive will be the ones who have already built the right technology foundations under their events.Justin brings years of experience helping nonprofits run galas that integrate cleanly into their existing systems — and he has seen firsthand what separates a smooth, energizing event from one that leaves staff burnt out. The conversation covers how to think about technology adoption the right way, how to make smarter asks on the big night, and how to use post-event data to deepen donor relationships before the window closes.Justin and Carolyn discuss:Why events have become more experiential since COVID, and how nonprofits can use that shift to bring donors closer to their mission.The three Ps of event technology adoption: procedure, people, and product — and why most organizations get the order wrong.How seamless integration between your event platform and your CRM or ERP protects staff from burnout and keeps donor data actionable.How the right data quickly allows you to identify your highest-value attendees and make the right asks at the right moment. And how data helps you plan the right type and right-sized event for your highest value donors. Why moving reconciliation and data planning to the front end of your event planning cycle - the three months in advance of your date - changes everything about the days that immediately follow your gala.Resources Mentioned:Trellis — https://www.trellis.org _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

Carolyn Woodard covers three topics this week: what the Canvas ransomware hack reveals about vendor risk for nonprofits, why roughly 80% of nonprofits still have no AI use policy and what you can do about it today, and why the new book AI for Nonprofits belongs on your leadership team's reading list even as AI tools continue to evolve rapidly.The Canvas story is at its core a governance story. When 30 million users depend on a single platform, a breach affects everyone who trusts that vendor. Nonprofits can't out-analyze the cybersecurity of major vendors, but you can make sure you have cybersecurity insurance that covers third-party breaches, a communications plan ready before a crisis hits, and solid data backups separated from your main systems.The bigger takeaway for AI governance: most nonprofits are already using AI tools without any organizational guardrails in place. You don't need a full formal policy to get started. A one-page declaration of principles, a commitment to paid enterprise tools over free versions, and a habit of documenting what's working can give your organization a meaningful foundation.And finally, AI for Nonprofits by Cheryl Contee and Darian Rodriguez Heyman is worth your leadership team's time, especially for its strategic framework and breadth of expert voices weighing in on AI uses across fundraising, communications, and program evaluation.Resources Mentioned:Instructure pays ransom to Canvas hackers — Inside Higher Ed — https://www.insidehighered.com/news/tech-innovation/administrative-tech/2026/05/11/instructure-pays-ransom-canvas-hackersWhat If My Organization Has No AI Use Policy — Candid — https://candid.org/blogs/no-ai-use-policy-what-to-do/How to Create a Nonprofit Incident Response Plan — Community IT Innovators — https://communityit.com/how-to-create-a-nonprofit-incident-response-plan/How to Use AI Tools Safely at Nonprofits — Community IT Innovators — https://communityit.com/webinar-how-to-use-ai-tools-safely-at-nonprofits/AI Acceptable Use Policy Template — Community IT Innovators — https://communityit.com/template-acceptable-use-of-ai-tools-in-the-nonprofit-workplace/AI for Nonprofits: Putting Artificial Intelligence to Work for Your Cause — Cheryl Contee and Darian Rodriguez Heyman — https://www.amazon.com/AI-Nonprofits-Putting-Artificial-Intelligence/dp/1394298412 or at your library or local bookstore! New every Tuesday. _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

Carolyn Woodard explores what it really means for a nonprofit to adopt AI responsibly and effectively with Cheryl Contee, co-founder of BrightWorks AI and Change Agent AI and co-author of the Amazon bestseller AI for Nonprofits: Putting Artificial Intelligence to Work for Your Cause. Cheryl is a pioneering technology entrepreneur recognized by Fast Company, Harvard's Berkman Center for Internet and Society, and The Root 100, and has appeared in the Washington Post, New York Times, CNN, and the BBC.The conversation reframes AI not as a threat to nonprofit jobs but as a way to multiply capacity in organizations that are already stretched thin. Cheryl and Carolyn dig into practical strategies for getting started, what makes a good AI workflow, and why the most successful nonprofit teams approach AI as an ongoing learning journey rather than a one-time implementation.This episode covers:Why the question for nonprofits is no longer whether to use AI — it is already embedded in your email, CRM, and productivity tools — but how to use it responsibly and creatively in service of your mission.How to identify the right starting point: pick one workflow you dislike, test one or two tools against it, and share what you learn with your team.Why humans must stay in the loop, especially for high-stakes decisions, sensitive interactions, and anything requiring lived experience, nuance, or accountability.Leadership habits build an AI-ready culture, including normalizing experimentation, creating a prompt library, and documenting what works.Common pitfalls to avoid: chasing every new tool, skipping staff training, ignoring ethical considerations, and expecting immediate transformation.Resources Mentioned:AI for Nonprofits: Putting Artificial Intelligence to Work for Your Cause — Cheryl Contee and Darian Rodriguez Heyman — https://www.amazon.com/AI-Nonprofits-Putting-Artificial-Intelligence/dp/1394298412/BrightWorks AI — https://brightworksai.comChange Agent AI — https://thechange.aiSkej AI scheduling assistant — https://skej.comThere's an AI for That — https://theresanAIforthat.comNTEN — https://nten.orgTechSoup — https://techsoup.org _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

Carolyn Woodard covers three topics shaping the nonprofit AI conversation right now: the real environmental costs of AI infrastructure, whether the AI market is actually a bubble, and a new survey that gives nonprofits a direct voice in shaping what comes next. This episode helps you move from anxious or skeptical observer to informed, active participant.This episode covers:AI data centers consume enormous energy and water, but the environmental picture is more nuanced than early viral statistics suggested. Cooling accounts for roughly 40% of data center energy use, and about 80% of water consumption comes from electricity generation, making this a grid problem as much as a local one.The AI market is consolidating faster than previous technology cycles. For nonprofits that have been waiting for the dust to settle, the more useful question now is: what is the cost of continuing to wait?82% of nonprofits are already using AI for internal operations, per Fast Forward's 2025 report, but nonprofits using free, off-the-shelf tools are less likely to have policies or risk controls in place.The Fast Forward 2026 AI for Humanity survey interest form is open now. If you are the person at your organization who knows the most about how AI is being used, your participation shapes how funders and policymakers understand what nonprofits actually need.Practical next steps suggestions: develop a policy, identify low-stakes pilots, check in on AI regularly at all-staff meetings, and ask your vendors about their clean energy and water commitments.Resources Mentioned:Fast Forward 2025 AI for Humanity ReportFast Forward 2026 Survey interest form (open now)Data Centers and Water Consumption — EESIData Center Water Use Explainer — MOST Policy InitiativeAbout That AI Bubble — The Atlantic (May 2026)Nonprofit AI podcast new every Tuesday. _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

Your nonprofit may be sitting on a data liability it doesn't know it has.Carolyn talks with Ian Gottesman, CEO of NGO ISAC, about data retention and why the question of what your organization keeps - and for how long - is more urgent than ever. Ian has been studying this topic for 30 years, and he makes the risks concrete: e-discovery requests, contractual disputes, subpoenas, and the exposure that comes from mixing personal and organizational data on staff devices. Most of the time, the threat isn't a headline-making congressional hearing - it's a vendor dispute or a board member's outside legal trouble that pulls your email and files into a lawsuit you didn't see coming.Ian walks through how to build a data retention policy, who in your organization needs to lead it, and why now. With AI tools beginning to ingest your file servers and inboxes, now is exactly the right moment to get serious about data hygiene.This episode covers:• The most common data retention risk for nonprofits isn't congressional testimony — it's a contractual dispute, a board member's outside legal matter, or a vendor conflict that pulls your organization into e-discovery.• Your backup retention schedule must align with your data retention policy. Backups that outlast your retention window are still discoverable — and that trunk of old backup tapes will find its way into a lawyer's hands.• Start your retention policy implementation with the most transitory data first: instant messaging and Slack, then email, then files. Automate deletion as much as possible, and make saving intentional and manual.• The hardest part of implementation isn't the policy, it's change management. People love their old emails. Enlist a senior leader (CEO, general counsel, COO) to champion the rollout, not just IT.• Clean data makes AI tools work better. If your file server is full of outdated drafts and duplicate documents, your AI tools are ingesting noise. A retention policy is the foundation of good data governance — and good AI outcomes.Resources Mentioned:• NGO ISAC• NTEN Course: Data Minimization and Retention — Ian Gottesman• Sample Not-for-Profit Document and Data Retention Policy — AICPA & CIMA• Document Retention Policies for Nonprofits — National Council of Nonprofits• Nonprofit Legal Defense Network (We the Action)Additional resource: Podcast: Prep Your File Permissions for AI Tools — Community IT Innovators _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

This week, Carolyn Woodard covers two resources: a practical new browser feature for Google Workspace shops and a nonprofit watchdog organization working to make the AI industry more accountable. Whether you're trying to get more out of your existing tools or looking for credible resources to bring to a board conversation about AI risk, this episode has something useful.This episode covers:Google quietly rolled out a feature called Skills inside Chrome — it lets you save a prompt once and run it on any web page with a click, without retyping. Pre-built Skills are also available for common tasks like summarizing long documents or comparing information across open tabs, no prompt-writing required.Skills is a reading and analysis assistant, not an agent — it won't take actions like making purchases or browsing on your behalf. It reads what's already in front of you in the browser and helps you process it faster.If your nonprofit is in the Google ecosystem and staff are hesitant to write prompts from scratch, Skills' pre-built library is a low-barrier starting point. Useful use cases include reviewing foundation grant pages and comparing information across multiple sites.The Center for AI Safety (CAIS) is a San Francisco-based research and advocacy nonprofit whose mission is to reduce societal-scale risks from AI. Their website (safe.ai) isn't a vendor — it's an independent watchdog with accessible explainers, free courses, and fellowship programs.CAIS offers a free AI Safety, Ethics and Society course that's relevant for nonprofits building AI literacy on a budget, plus a fellowship for people doing advocacy work around AI governance, bias, or data center impacts.When staff or board members are skeptical about AI — or when you need a credible outside voice for your AI strategy conversations — CAIS is a more trustworthy resource than asking the AI companies themselves what's safe.Resources Mentioned:https://www.wired.com/story/how-to-use-google-chrome-ai-powered-skills/https://blog.google/products-and-platforms/products/chrome/skills-in-chrome/https://safe.aihttps://safe.ai/ai-riskhttps://aisafetybook.com/virtual-coursehttps://www.reddit.com/r/NonprofitITManagement/ _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

In Part 2 of the 2026 Nonprofit Cybersecurity Incident Report, Community IT CTO Matthew Eshleman walks through the real attack examples his team saw hitting nonprofits in 2025: scareware pop-ups, fake invoices, DMCA impersonation notices, HR job scams, and calendar phishing. He also unpacks eight years of incident data and what the numbers actually mean — including a 70% spike in malware activity and a surprising drop in phishing reports that turns out to say more about tools than threat actors.The conversation closes with a practical look at what nonprofits should prioritize in 2026, from phish-resistant MFA to AI governance — because the gap between what your org has authorized and what your staff are already doing is quietly becoming one of your biggest risks.Haven't listened to Part 1 yet? Find it in your podcast feed.This episode covers:A 60% drop in reported phishing messages sounds like good news — but it reflects a tool switch, not a safer threat landscape, and underscores the value of regularly reevaluating your tools and using best of breed protections.Malware and endpoint virus activity surged 70% year over year, with AI enabling less sophisticated actors to launch more targeted attacks.Real attack examples from 2025: fake invoices with convincing ACH details, DMCA legal threats, HR job scams using your organization's identity, and calendar invites engineered to create urgency.New staff, HR contacts, and finance and operations roles are the highest-value targets for social engineering — and your training program should reflect that.Ungoverned AI is a growing data risk. Staff are already using free AI tools, and the downstream exposure is only beginning to show up.A strong cybersecurity foundation in 2026 means IT acceptable use policies, formal security awareness training, phish-resistant MFA, cloud identity monitoring, and consistent patching.Resources Mentioned:Nonprofit AI Governance Tips Webinar — May 27 with Senior Consultant Nuradeen AbokiNonprofit Cybersecurity Playbook — Community IT InnovatorsNonprofit IT Management Community — RedditHow to Use AI Tools Safely at Nonprofits — Community IT WebinarTalk to Matt About Your Cybersecurity Questions — Community IT _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

Carolyn Woodard covers two major AI announcements breaking today — a landmark philanthropic gift building the country's first "AI-native" hospital, and a massive infrastructure deal between Amazon and Anthropic — and zooms out to ask what all this big-money investment means for nonprofits on the ground. The answer: now more than ever, building your own AI literacy is the most strategic investment your organization can make.This episode also features a resources roundup with five options for nonprofit staff and foundation professionals who are ready to learn — whether you have 60 minutes or six months.This episode covers:Michael and Susan Dell's $750 million gift to UT Austin funding the country's first "AI-native" hospital is a signal for nonprofits about where philanthropic capital is heading.What Amazon's expanded investment in Anthropic means for AI infrastructure — and why the unsustainable pace of data center growth may actually push major tech companies toward renewable energy and less resource-intensive locations, a shift that matters for the communities currently bearing the costs of that build-out.Why the most important AI investment your nonprofit can make right now isn't a tool — it's literacy, and why doing it together as an organization matters more than one person figuring it out alone.Five concrete learning opportunities for nonprofit staff at every level.Your city or region may already have free AI literacy programs designed for local nonprofits — it's worth a quick search."Do I need to pick one AI tool and stick with it?" — why the more important question is whether your organization has a policy about what you're sharing and with whom.Resources Mentioned:UT Dell Medical Center announcement — University of Texas at Austin — https://www.kut.org/health/2026-04-21/ut-austin-dell-medical-center-hospital-michael-susan-dell-foundation-donationAmazon/Anthropic expanded partnership — Anthropic — https://www.anthropic.com/news/anthropic-amazon-computeThe Human Stack — Tim Lockie's "AI for Anyone" course — https://thehumanstack.com/academy/aiforanyoneAI for Nonprofits Sprint — Fund for the City of New York — https://www.fcny.org/aisprint/AI for Foundations Professional Certificate — TAG + NTEN — https://www.nten.org/learn/professional-certificates/ai-for-foundationsMicrosoft Changemaker Fellowship — https://www.microsoft.com/en-us/nonprofits/resourcesAI Acceptable Use Policy Template — Community IT Innovators — https://communityit.com/template-acceptable-use-of-ai-tools-in-the-nonprofit-workplace/ _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

In the first part of this annual check-in, Carolyn Woodard and Matthew Eshleman dive into the findings from the eighth annual Nonprofit Cybersecurity Incident Report. Analyzing data from thousands of client endpoints throughout 2025, they discuss how the landscape has shifted—specifically how AI is being used by threat actors to lower the barrier for sophisticated attacks. This episode provides a high-level look at the trends that defined the past year and the foundational layers every nonprofit needs to protect its mission in 2026.The conversation covers the rise of financially motivated scams, the increasing frequency of partisan digital attacks, and why data is transitionally moving from an organizational asset to a potential liability. Matthew explains:How AI tools are accelerating attack vectors through automated scripts and convincing phishing.Why your organization’s cybersecurity foundation must be built on policy and frequent, vibrant staff training rather than just annual videos.The evolution of multi-factor authentication (MFA) and the shift toward phish-resistant methods like Passkeys or physical keys like FIDO keys.Why data retention policies are becoming a necessity to mitigate legal risks and data leakage.The importance of governing how staff interact with free AI tools to prevent institutional data from entering the public domain.Resources MentionedNonprofit IT Management Reddit CommunityCybersecurity Playbook for NonprofitsNGO ISACKnowBe4 Security Awareness Training _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.

Carolyn Woodard opens with highlights from Good Tech Summit, a three-day Washington D.C. conference bringing together practitioners, funders, and tech leaders focused on responsible AI use in the social sector. She shares standout quotes on AI governance, accountability, and what the sector needs to do differently. This episode also covers the Claude Cowork tool nonprofits should know about, a privacy change in a new Google Labs tool that affects your data, and the Claude Mythos Preview non-release that has bank executives and governments in emergency meetings.This episode covers:Key takeaways from Good Tech Summit, including "We need to stop random acts of AI" and why your AI policy should be grounded in values — not updated every time a new tool drops.How Claude Cowork compares to Google Workspace Studio and Microsoft Copilot Cowork — and whether nonprofits are better served by AI built into their existing tech stack or a mission-aligned third-party tool.What Google Opal is, why you may have seen a notice that it sits outside Workspace's enterprise privacy protections, and what nonprofit staff should know about using it.Why Anthropic built its most powerful AI model ever and then refused to release it publicly and what that points out about our current power imbalance between tech companies and consumers."Technology is not a net good or net bad. We don't know yet whether AI will be a net benefit or net harm — but we need to be engaged, literate, and demanding."Why building AI fluency together as a sector matters; sending staff off to figure it out alone keeps us isolated. Resources Mentioned:Good Tech Summit — watch for next year's annual event at goodtechtogether.orgClaude for Nonprofits — AnthropicClaude Cowork Overview — AnthropicGoogle Opal (Google Labs experiment)Claude Mythos Preview — AnthropicClaude Mythos Preview — ForbesClaude Mythos Preview — WIRED2026 Nonprofit Cybersecurity Incident Report Webinar _______________________________Start a conversation :)Register to attend a webinar in real time, and find all past transcripts at https://communityit.com/webinars/email Carolyn at cwoodard@communityit.comon LinkedIn on reddit/r/nonprofitITmanagementon the Community IT websiteThanks for listening.