The State of Charity Tech, 2026

Every two or three years a "state of charity tech" report appears, full of vendor logos and breathless predictions. This is not that report. This is a working read of where UK charity technology genuinely sits in 2026, what is finally maturing, what is still over-sold, and the operational decisions a trustee board should be making this year.

It is written for the senior staff member who has to navigate vendor conversations, build an internal case, and avoid a five-year regret. It is biased only by the fact that we have spent the last decade implementing this stuff for small and mid-sized charities, and we have a working sense of which of the promises kept and which did not.

Executive summary

• CRM consolidation is the most consequential decision most charities will make this year.
• AI is genuinely useful in narrow places (drafting, summarising, code) and over-sold in wide ones (personalisation, predictive scoring, beneficiary-facing chatbots).
• Preference centres and consent management have become a board-level risk topic. Most charities are still under-invested.
• Data infrastructure (a clean CRM, a basic warehouse, a working dashboard) outperforms point-tool spending by a wide margin.
• Cybersecurity is the silent line item. The cost of getting it wrong has gone up; most charity budgets have not caught up.
• A reasonable spend benchmark is 2–4% of total income on technology, including software, staff, and services.

1. CRM: the most important decision of the year

A charity's CRM outlasts most of its software, most of its staff, and most of its strategic plans. The decision to keep, replace, or upgrade it is the single most consequential technology decision a charity makes in a five-year window.

In 2026, the UK charity CRM market is splitting into four shapes: charity-specific cloud (Donorfy, Beacon, Salesforce NPSP, Microsoft Cloud for Nonprofit); configured general-purpose CRM (Salesforce, HubSpot, Zoho, Dynamics); sector-vertical specialist (membership, education, faith); and the "spreadsheet plus" stack (Airtable + Mailchimp + a finance tool).

The "right" shape is determined less by features and more by team capability and roadmap. Three signals it is the right time to switch:

• Standard reporting takes more than 30 minutes.
• Fundraisers maintain shadow spreadsheets because the CRM is too slow or too rigid.
• You are paying for at least three "shadow" tools (separate email, events, volunteer database) that should sit inside the CRM.

2. AI: useful narrowly, over-sold widely

Two years on from the first wave of AI hype, the working picture is clearer. AI in charities is genuinely useful in five places: first-draft writing, meeting summarisation, code and data wrangling for non-developers, translation, and synthetic test data. It is breaking even or losing in three: scaled fundraising personalisation, predictive donor scoring, and beneficiary-facing chatbots.

The governance gap is the bigger story. Most charities have AI usage happening across the team without any policy. The minimum scaffolding required by 2026 is:

1. A 3–5 page AI usage policy, signed off by trustees, listing approved tools, prohibited use cases, and an incident process.
1. A vendor data-processing addendum for each AI tool the charity uses.
1. A short staff guide covering the common use cases.
1. A named AI lead - usually held by the head of digital, data, or operations.

Without that, AI use drifts into shadow IT. The reputational and regulatory exposure is real. We expect the ICO to issue further guidance on AI use in fundraising and beneficiary services within the next 12 months.

3. Preference centres and consent: now a board topic

In 2026, consent management has moved from "comms operations" to "board-level risk." Three pressures combined to push it there: tighter ICO enforcement, the Fundraising Regulator's updated guidance, and the cost of unsubscribe waves driven by AI-generated content fatigue.

A working preference centre - three dimensions of choice (cause / cadence / channel), one source of truth in the CRM, two-way sync, an audit trail - is one of the cheapest retention tools available. Most small charities are still operating with a binary "subscribed / unsubscribed" model that is leaving 20–40% of warm supporters on the table.

The fix is not exotic. It is one project, three weeks of build, sign-off from the DPO, and the discipline to keep the consent rule book current. The charities that have invested here are seeing measurable lift in supporter retention; the ones that haven't are losing supporters they will never re-acquire.

4. Data infrastructure beats point tools

A pattern has held up across charities of every size: investment in basic data infrastructure - a clean CRM core, a small data warehouse or sheet-based equivalent, a working Monday-morning dashboard - outperforms equivalent spend on individual point tools by a wide margin.

The reason is structural. A point tool (the new email platform, the new event tool, the new volunteer app) gives you a feature. A clean data foundation gives you the ability to use that feature, plus every future feature, without integration projects. The compounding return on data investment is the single most under-priced lever in the sector.

A working version of "good enough" data infrastructure for a small charity in 2026:

• A single CRM as the source of truth for supporter records.
• A nightly export to a sheet or warehouse where derived metrics live.
• A one-page dashboard that the senior team opens every Monday.
• A consent and preference layer in the CRM, audit-trailed.
• Documented integrations between CRM, email, finance, and one or two operational tools.

That is achievable on a sub-£10k annual technology budget for an under-£1m charity, and it pays back within a year.

5. Cybersecurity: the silent line item

Charity cyber attacks are no longer rare. The 2024 government Cyber Breaches Survey put the proportion of charities reporting an attack in the previous 12 months above one in three. The cost when it goes wrong has risen - recovery, regulator engagement, supporter notification, reputational repair.

Three controls that account for most of the risk reduction:

• Multi-factor authentication on every staff and trustee account, no exceptions.
• A documented backup and recovery process, tested at least annually.
• A patched, supported endpoint management policy - staff devices not running outdated OS or unpatched browsers.

Cyber Essentials certification (or Cyber Essentials Plus for higher-risk charities) is now table stakes for grant-funded work. The charities that have invested are reaping insurance and grant benefits; the ones that haven't are increasingly being shut out of certain funding streams.

6. The 2–4% benchmark

A working spend benchmark for charity technology in 2026 is 2–4% of total income, including software licences, internal IT staff or fractional support, services, and a buffer for project work. Charities spending much less are usually under-investing; those spending much more are usually fragmented, with multiple shadow tools and missing integrations.

A useful exercise: list every recurring technology charge (software, hosting, integrations, support contracts), divide by total income, and compare. Most charities discover their actual spend is more scattered than they thought, and a meaningful share of it is on tools that are no longer used.

7. The shape of "good" - what trustees should expect to see

A trustee board should expect, by the end of 2026, to be able to ask the senior team:

1. Is our CRM fit for the next five years? (Documented assessment, written.)
1. Do we have a written AI usage policy, signed off, current?
1. Are we Cyber Essentials certified, with a documented incident response plan?
1. Can the senior team open one dashboard and answer the six core operational questions?
1. Is our consent and preference management compliant and well-used by supporters?

"Yes" to all five is not a stretch goal in 2026. It is a baseline. Charities that are below it are carrying meaningful risk; charities that are at or above it are positioned to compound advantages over the next several years.

8. Three things to deprioritise

A working short list of what is over-sold or premature for most small charities in 2026:

1. Web3 / blockchain donation platforms

Niche use cases exist but the operational overhead and reputational risk for a typical UK charity vastly outweigh the marginal donor reach. Treat as experiment-budget at most.

2. Custom mobile apps

Almost always a worse return than investing the same money in a fast, accessible website with a Progressive Web App. A custom app for a charity under £5m income is rarely the right call.

3. Vendor-locked predictive scoring

A simple manual three-signal score outperforms vendor-locked predictive scoring for most small and mid-sized charities, at a fraction of the cost and with full interpretability. Re-evaluate the predictive product only when you have outgrown the simple version.

9. The next 24 months - what to expect

Three shifts to plan around:

• AI regulation will tighten. Expect specific guidance on AI in fundraising, in beneficiary services, and in supporter communication. Build a policy now that is robust to expected tightening.
• Cybersecurity will be a grant condition. More funders will require evidence of basic security controls (Cyber Essentials, MFA) as a precondition of grant payment.
• CRM market consolidation will accelerate. Several mid-size sector-specific vendors are likely to be acquired in the next 24 months. Charities locked into smaller vendors should plan for ownership changes and read their contracts now.

The charities that will outperform in 2030 are not the ones with the most software in 2026. They are the ones with the cleanest data, the smallest sustainable stack, and the most explicit governance. The shape of the win is becoming clear; the work is in the execution.

Closing recommendations

1. Conduct a written CRM assessment by Q2 - keep, configure, or replace, with a costed plan.
1. Adopt an AI usage policy by Q2, signed off by trustees, reviewed every six months.
1. Achieve or maintain Cyber Essentials certification by Q3.
1. Stand up a one-page Monday-morning dashboard by Q3.
1. Audit and rebuild the preference centre by Q4.
1. Set the technology budget at 2–4% of income for 2027, with named owners for each line.

That is six steps. None of them is exotic. Together they put a charity in a substantially stronger position than the median in the sector - and there is no reason it cannot all happen inside one financial year.

Further reading

AI for Charities: What to Use, What to Avoid | From Data to Dashboards in a Week | Choosing a Charity CRM in 2026