Elementum
← Back to the welcome page

Compliance, Legal and Risk.

Some problems threaten a program. This one can end the whole organization. The rules that let a nonprofit exist and operate are not optional, and the penalty for missing them is not a bad quarter.

It is losing your tax-exempt status, a fine you cannot pay, a funder pulling out, or a headline you cannot recover from. Most leaders are not out of compliance on purpose. They simply never built the machinery to keep track, and so a filing lapses, a registration is missed in a state where they now fundraise, a policy they were supposed to have was never written, an audit arrives and the records are a mess, or a risk they never named becomes the crisis that consumes a year. It usually feels fine right up until it very much does not.

That is what this work is for. Not to make you a lawyer, and not to give you legal advice, which no honest system can do for your specific situation. It is to build the machine that keeps you in good standing: a complete list of everything you are required to do and when, the protections that keep your tax-exempt status safe, the registrations and policies you are required to have, the readiness to survive an audit, and a clear-eyed handle on your real risks. When that machine is running, the fear goes quiet, because you are no longer hoping you are compliant. You know you are.

You are in the right place if

You could not produce, right now, a list of every filing, registration, and report you are legally required to make and when each is due. You are not sure your tax-exempt status is safe, or you know a return is late. You fundraise in places you have never registered, or you lack policies you have heard you are supposed to have. An audit is coming, or has arrived, and you are not ready. Or you have a nagging sense of exposure, uninsured risks, unreviewed contracts, unprotected data, duties to the people you serve, that no one has ever sat down and mapped.

The one idea to carry in

Compliance is not about knowing the law. It is about building a system so that the things you are required to do actually get done, on time, every time, by someone whose job it is. Almost nobody loses their status or fails an audit because they misunderstood a rule. They lose it because nothing in the organization was tracking the obligation. So this work builds the tracking, the policies, the readiness, and the review, and it sends the actual legal questions to the people trained to answer them.

A hard truth: a gap is not an active problem

There is a difference between a gap and an active problem, and they need completely different responses. A gap is something you have not set up yet: a registration you are missing, a policy you have not written, a calendar that does not exist. You fix a gap by building the system, and this work will walk you through it. An active problem is a fire already burning: a letter from a regulator, a late return threatening your status, an audit underway, an incident involving a person's safety. You do not handle an active problem with a worksheet. You get the right professional on it this week, and then you build the system so it does not happen again. The very first thing this work does is help you tell which one you have.

And when someone's safety is at stake, a vulnerable person harmed, a credible threat, a legal duty to report, nothing here comes first. You act immediately, you meet your reporting duties, and you get the right professional involved, before any of the system-building. Protecting a person in front of you outranks every process here.

How this works

You start with a short diagnostic, because compliance trouble comes in a few distinct shapes and each needs different work. Sometimes you simply do not know what you are required to do. Sometimes the status that lets you exist is exposed. Sometimes you are missing registrations or required policies. Sometimes an audit is looming and you are not ready. And sometimes the danger is the everyday risk no one has mapped. The diagnostic catches any active problem and gets a professional onto it first, then finds which systems are missing, checks whether you are actually compliant or only assume you are, and hands you a prioritized plan. You do only the guides your plan names.

The guides here

Start here: The Compliance, Legal and Risk Diagnostic
A short, honest look that catches an active problem and routes it to the right professional now, finds where your exposure lives, tests whether you are actually in good standing or only assume you are, and hands you a prioritized plan naming your first guide.
Map Your Obligations and Never Miss a Deadline
For when you do not know what you owe. Catalogue every filing, registration, renewal, and report, and build the living calendar that keeps them met.
Protect Your Tax-Exempt Standing
For when the status that lets you exist is exposed. Get your annual return filed right and on time, and guard against the things that threaten or revoke your status.
Register and Adopt the Policies You Are Required to Have
For when the legal foundations are missing. Confirm your standing, register where you fundraise, and adopt the policies you are required to hold.
Get Ready for and Survive an Audit
For when an audit looms or has arrived. Find out whether and what kind you need, prepare so you pass, run the engagement, and respond to findings.
Find and Manage Your Risks
For the everyday exposures that become crises. Run a risk review, get the right insurance, protect your contracts and data, and meet your duties to the people you serve and employ.

This work builds the system that keeps you legal and in good standing. It does not give you legal advice or interpret the law for your situation; the moment a real legal question or an active problem appears, it sends you to an attorney or a nonprofit accountant, and that is a feature, not a gap. It does not manage your money, your budget, or your reserves; that is financial health and management, though the numbers feed your annual return and your audit. It does not build your general operating systems or your technology; that is operations and systems. It does not handle the specifics of employment law, which live with your staffing work and an employment attorney, or volunteer screening, which lives with your volunteer work, or a harassment or safety incident, which lives with your culture work and the right professional. And the engine-specific compliance of a particular grant, contract, or public award lives in the grants, billing, and awards work. This work will point you to each of those doors, and to the right professional, at the moment it becomes the honest next step.

Start with the Compliance, Legal and Risk Diagnostic. It will tell you which guide is yours, and it will catch anything that needs a professional today. You can always go back to the welcome page.