Microsoft and Google both run programs that give eligible Canadian non-profits and registered charities free or discounted Microsoft 365 and Google Workspace plans. What's included and who qualifies changes over time, so confirm current eligibility on Microsoft's and Google's non-profit pages before you apply. The free plans don't switch on every security protection you need by default. We recommend turning on multi-factor authentication, adding email filtering and keeping independent backups, which a managed provider like WILDCARD MSP can handle for you.
Canadian non-profits can access two major productivity suites at no cost or at a discount through the providers' non-profit programs. Google Workspace for Nonprofits gives eligible organizations Google's collaboration tools: Gmail, Drive, Docs, Sheets and Meet. Microsoft 365 for nonprofits gives eligible organizations Microsoft's familiar tools: Outlook, Word, Excel, Teams, OneDrive and SharePoint. Both programs check your organization's status before granting access.
Google for Nonprofits gives eligible organizations access to Google products and discounts. These tools help with the challenges non-profits face every day: finding new donors and volunteers, working more efficiently and getting supporters to take action. Check Google's non-profit page for the current eligibility rules in Canada.
Microsoft provides grants and discounts for eligible non-profits. Organizations generally need to operate on a not-for-profit basis with a mission that benefits the community, such as relieving poverty, advancing education, improving social welfare, preserving culture or protecting the environment. Check Microsoft's non-profit page for the current offer.
Both platforms include email, file storage and video meetings. The right choice depends on how your team already works.
Google Workspace is browser-first. Documents, spreadsheets and meetings live in one web environment, and staff who like real-time co-editing usually adapt quickly. Microsoft 365 centres on familiar desktop applications like Word, Excel and Outlook, so teams used to traditional office software often find the move smoother.
| Feature | Google Workspace | Microsoft 365 |
|---|---|---|
| Primary editing environment | Browser-first, real-time | Desktop apps with cloud sync |
| File storage | Google Drive | OneDrive and SharePoint |
| Communication hub | Gmail and Google Meet | Outlook and Microsoft Teams |
| Offline access | Limited, needs setup | Strong, built into desktop apps |
Google Workspace treats every file as a live, shared document by default, so several people can edit at once. Microsoft 365 supports co-authoring too, though the experience differs between the desktop and web versions.
A few settings block the most common ways attackers get in. Without them, a single compromised inbox or unpatched laptop can expose donor data, financial records and client information.
Multi-factor authentication (MFA) asks for a second proof, usually a code or a tap on your phone, on top of a password. Both Microsoft 365 and Google Workspace include it at no extra cost. Turn it on for every account, starting with administrators and the Executive Director. Use an authenticator app rather than text-message codes where you can, and give volunteers a short how-to so nobody gets locked out.
Email is still the main way phishing and malware get in. CORE's Email Security stops spam, phishing attempts and malicious attachments before they reach anyone's inbox. Because filtering happens before delivery, staff never see most dangerous messages, and a tired team member is less likely to click a convincing fake invoice.
Threats don't stop at the inbox. CORE's Identity Monitor watches your organization's identity, website, domain and the dark web for threats 24/7. If staff credentials turn up in a breach, you hear about it early, which shrinks the window an attacker has to use stolen information.
Every piece of software has weaknesses that vendors fix through updates. CORE's Patch Management makes sure every device receives those fixes within 30 days, automatically. Consistent, enforced updates close known gaps before attackers can use them.
Microsoft and Google keep their services running, but they don't keep independent backups of your data. CORE's Unified Backups back up email, workspace and drives automatically, plus device-level backups. CORE includes Email Security, Identity Monitor, Patch Management and three other protections for $23 per user + $26 per device = $49 per seat per month, before applicable taxes. See how we support non-profits.
Microsoft 365 and Google Workspace both offer free or discounted plans to eligible Canadian non-profits and registered charities. Check current eligibility on their non-profit pages.
Not by default. Turn on multi-factor authentication, add email filtering and keep independent backups to protect donor data.
Start with MFA on every account, then add email filtering, identity monitoring, patching and independent backups, either yourselves or through a managed provider like WILDCARD MSP.
The free plans from Microsoft and Google give your non-profit powerful tools, but they leave key protections switched off. Turn on multi-factor authentication, add email filtering and identity monitoring, keep devices patched and keep independent backups. That's how we Make IT Disappear: your team stays productive and your donor data stays protected.
Start with the free Domain Security Scan, or call us at 1-888-274-3530.