August 17, 2026
Written policies are the foundation of effective governance and organizational stability. They provide clear direction, promote accountability, reduce risk, and help ensure that decisions are made consistently and in the best interests of the organization. More than compliance documents, policies are practical tools that help nonprofits protect their mission, preserve institutional knowledge, and maintain the trust of donors, grantors, beneficiaries, and the communities they serve.
This article outlines the foundational policies many nonprofits should consider implementing as part of a strong governance and risk management framework and explains why they matter.
Written policies are the foundation of effective governance and organizational stability. They provide clear direction, promote accountability, reduce risk, and help ensure that decisions are made consistently and in the best interests of the organization. More than compliance documents, policies are practical tools that help nonprofits protect their mission, preserve institutional knowledge, and maintain the trust of donors, grantors, beneficiaries, and the communities they serve.
Policies also provide continuity as board members, executives, and employees change over time. By documenting expectations, responsibilities, and procedures, organizations can promote consistency in operations and decision-making while reducing their reliance on institutional knowledge and informal practices.
The importance of documented policies is reflected in the Internal Revenue Service's governance guidance. Form 990 specifically asks organizations about several key governance policies, including conflict of interest, whistleblower, and document retention policies. Organizations with strong governance practices are generally better positioned to safeguard charitable assets, comply with regulatory requirements, demonstrate accountability, and maintain public confidence.
While every nonprofit's circumstances are unique, the following policies form the foundation of a strong governance and risk management framework.
A conflict of interest policy is one of the most important governance policies a nonprofit can adopt.
Board members, executives, and employees often have relationships with vendors, donors, grant recipients, or other organizations that could create actual or perceived conflicts. A conflict of interest policy establishes procedures for identifying, disclosing, and addressing those situations before they compromise decision-making.
Policies should generally include:
Why It Matters
Without a formal process, even well-intentioned decisions can damage an organization's credibility. A conflict of interest policy protects the nonprofit's mission, stakeholders, and reputation while helping board members fulfill their fiduciary duty of loyalty. The IRS specifically asks nonprofits whether they maintain a written conflict-of-interest policy on Form 990.
Employees and volunteers are often the first to identify fraud, misconduct, ethical concerns, or policy violations.
A whistleblower policy encourages individuals to report concerns without fear of retaliation. It also establishes a clear process for investigating allegations and resolving issues appropriately.
Policies should generally include:
Why It Matters
Organizations that foster transparency are more likely to identify and resolve problems before they become significant legal, financial, or reputational issues. Federal law provides protections for whistleblowers, and governance organizations widely recommend adopting written whistleblower policies.
Nonprofits generate large volumes of records, including financial statements, grant agreements, donor records, payroll documentation, contracts, and board minutes.
Policies should generally include:
Why It Matters
Consistent retention practices reduce legal risk, support audits, and ensure important organizational records remain available when needed. The IRS includes document retention and destruction policies among the governance practices highlighted on Form 990.
Strong financial controls and well-defined organizational processes are critical regardless of an organization's size. These policies establish how financial and operational activities are managed, overseen, and documented throughout the organization.
Policies should generally include:
Why It Matters
Fraud prevention starts with well-designed controls and clearly documented processes. Policies provide consistency and accountability while helping boards and management fulfill their oversight responsibilities. They establish clear expectations, reduce operational risk, preserve institutional knowledge, and help ensure that critical activities are performed consistently and in accordance with organizational objectives. Internal control frameworks emphasize authorization procedures, independent reviews, reconciliations, and segregation of duties as foundational safeguards for protecting organizational assets and supporting reliable operations.
Not every donation is necessarily in a nonprofit's best interest. A gift acceptance policy helps organizations evaluate whether certain types of contributions should be accepted. This becomes especially important when donors offer noncash gifts such as real estate, closely held business interests, vehicles, artwork, or other complex assets.
Policies should generally include:
Why It Matters
Gift acceptance policies help nonprofits avoid unexpected liabilities and ensure contributions align with the organization's mission and capacity. Many nonprofit governance experts view this policy as essential, particularly for organizations receiving noncash donations.
An investment policy helps ensure investment decisions are made consistently for endowment assets, operating reserves, and other invested funds held by the organization.
Policies should generally include:
Why It Matters
An investment policy helps ensure investment decisions are made consistently and in accordance with the organization's financial objectives, liquidity needs, and risk tolerance. It promotes good stewardship of charitable assets, provides a framework for board oversight, and helps fulfill the board's fiduciary responsibilities. For organizations managing endowments, an investment policy also provides continuity as board members and leadership change and helps ensure assets are managed in support of the organization's long-term mission and financial sustainability.
Nonprofits increasingly collect and maintain sensitive donor, employee, participant, and financial information.
Policies should generally include:
Why It Matters
Cyber threats continue to grow, and nonprofits are not immune. A documented cybersecurity framework helps organizations protect sensitive information, respond effectively to incidents, and comply with evolving privacy requirements.
Effective governance extends beyond compliance. Board governance and ethics policies help establish expectations for how board members, officers, and organizational leaders should conduct themselves and make decisions in support of the nonprofit's mission. Governance resources commonly emphasize board responsibilities, fiduciary duties, committee oversight, and ethical conduct as key components of an effective governance framework.
Policies should generally include:
Why It Matters
Strong governance and ethics policies help board members understand their fiduciary duties and establish expectations for integrity, accountability, and ethical decision-making. These policies promote transparency, help prevent conflicts and misconduct, and create consistency in oversight and governance practices. Organizations with well-defined governance frameworks are better positioned to safeguard charitable assets, maintain public trust, and effectively advance their mission. Governance experts emphasize that policies should not simply exist on paper but should be actively reviewed, communicated, and implemented.
Written policies are a critical component of strong nonprofit governance and operational effectiveness. They provide a framework for accountability, risk management, ethical decision-making, and the consistent administration of an organization's programs, finances, and resources. By documenting expectations, responsibilities, and procedures, nonprofits can better safeguard charitable assets, support compliance efforts, preserve institutional knowledge, and maintain the trust of donors, grantors, beneficiaries, and other stakeholders.
However, having policies on paper is only the first step. Policies are most effective when they are actively communicated, consistently followed, and integrated into the organization's day-to-day operations. Board members, management, employees, and volunteers should understand their responsibilities under each policy and apply them when making decisions.
Organizations should also review their policies regularly to ensure they remain relevant and aligned with current laws, regulations, operational practices, and organizational needs. As nonprofits grow and evolve, their risks, activities, and governance structures often change as well. Periodic policy reviews help ensure that policies continue to support the organization's mission and provide meaningful guidance.
Ultimately, effective policies are not simply compliance documents or administrative formalities. They are practical tools that help nonprofits operate responsibly, navigate challenges, strengthen governance, and position themselves for long-term success and sustainability. Organizations that regularly evaluate, update, communicate, and reinforce their policies are better positioned to adapt to changing risks, maintain stakeholder trust, and continue advancing their mission for years to come.
What policies should every nonprofit have?
While every nonprofit's circumstances are unique, conflict of interest, whistleblower, document retention, financial management, gift acceptance, investment, cybersecurity, and board governance policies form the foundation of a strong governance and risk management framework.
Why are written policies important for nonprofits?
Written policies provide direction, promote accountability, reduce risk, and help ensure decisions are made consistently and in the best interests of the organization. They also help protect the nonprofit's mission, preserve institutional knowledge, and maintain stakeholder trust.
Why does Form 990 ask about governance policies?
The IRS governance section of Form 990 specifically asks organizations about several key policies, including conflict of interest, whistleblower, and document retention policies. These policies are widely recognized as important governance practices.
Why should nonprofits review their policies regularly?
As nonprofits grow and evolve, their risks, activities, and governance structures often change. Periodic policy reviews help ensure policies remain relevant and continue to support the organization's mission and operational needs.
Are policies enough by themselves?
No. Policies are most effective when they are actively communicated, consistently followed, and integrated into day-to-day operations. Organizations should ensure board members, management, employees, and volunteers understand and apply them when making decisions.
Please reach out to the Larson Nonprofit Team for additional guidance.