New partnership: Give Lively brings California filings to nonprofits with Change
Change logo
Product
Charitable Registrations
Donations API
Legal Compliance
Nonprofit Verifications
Disbursements
Solutions
BY USE CASE
Donations at Checkout
Sweepstakes & Auctions
Loyalty Programs
Corporate Gifting
BY COMPANY TYPE
Commercial Co-Venturers
Professional Fundraisers
Law Firms
Legal Service Providers
Charitable Fundraising Platforms
Payment Processors
Resources
Blog
Keep up with Change’s latest
Customer Stories
How our customers use Change
Guides
Directories, how-to guides, and more
API Docs
How to use Change API endpoints
Help Center
How to use the Change platform
Hot off the press
CA AB 488 vs. HI SB 1048: Charitable Fundraising Platform Guide
A quick compliance guide comparing California and Hawaii’s fundraising platform rules.
Pricing
Pricing for Companies
Pricing for Charitable Registrations
How it Works
Request a Demo
Request a Demo
Compliance Insights

Online donation compliance: six gaps to close

Amar Shah, Change
Amar Shah
November 13, 2025
Blog
Compliance Insights
Online donation compliance: six gaps to close
Last Updated:
November 13, 2025
Amar Shah, Change
Amar Shah

Online donation programs most often fail in the gaps between the customer interface, legal structure, payment flow, nonprofit status, ledger, receipt, and payout. Closing those gaps requires one operating model that assigns every solicitation, dollar, disclosure, record, and exception to a responsible party.

A polished donate button does not show whether the program is compliant or auditable. Teams should test the entire journey from campaign approval through the nonprofit's receipt of funds.

Gap 1: the parties and legal categories are unclear

Document every party: company, platform, merchant, nonprofit, platform charity or sponsoring organization, professional fundraiser, payment processor, donor, and payout provider. Then identify who solicits, receives, controls, receipts, verifies, grants, disburses, reports, and responds to complaints.

The same interface can implicate commercial co-venturer, professional fundraiser, charitable fundraising platform, platform charity, and nonprofit registration rules. The correct category depends on activity and jurisdiction, not the label chosen in a contract.

Change's checkout donation guide provides an intake framework for these questions. Counsel should verify classifications against current primary sources before launch.

Gap 2: the nonprofit is listed without current approval or status

A program needs a policy for nonprofit consent, identity, eligibility, and payout readiness. The policy should state which organizations can appear, when they are checked, what sources control, and what happens when a record changes.

California's charitable fundraising platform rules include good-standing and consent requirements, including a regulated pathway for certain non-consenting charity solicitations. Hawaii's 2026 platform law requires written consent. One national interface therefore needs jurisdiction-specific controls.

Change's nonprofit verification tools support identity and eligibility monitoring. Ambiguous matches, conflicting sources, and exceptions should reach a human reviewer rather than being forced into a silent pass or fail.

Gap 3: the public promise does not match the transaction

The campaign should state who contributes, which nonprofit benefits, the amount or formula, dates, eligible activity, limits, fees, payout timing, and material exceptions. Avoid vague language when the program can state the rule directly.

The interface, terms, receipt, support content, nonprofit agreement, code, and ledger should use the same definitions. A customer-funded donation should not be described as company giving, and a company-funded promotion should not generate a customer tax receipt.

The IRS substantiation guidance explains federal acknowledgment and quid pro quo rules. State platform and consumer-protection laws can require additional disclosures.

Close the gaps in your donation workflow

See how Change connects donation experiences, compliance, nonprofit verification, records, and payouts.
Explore donation infrastructure

Gaps 4 and 5: funds and records cannot be reconciled

Map where funds settle, who owns each account, when the charitable amount becomes final, how fees and refunds are treated, and when the nonprofit receives payment. Keep charitable funds separate when the applicable law or structure requires it.

Use one ledger connecting campaign, customer, order, donation, nonprofit, fee, refund, processor settlement, receipt, disbursement, and report. Every public total should be reproducible from transaction-level records.

Change's donation infrastructure and disbursement tools connect transaction records with nonprofit eligibility and payout status. The organization should still define approval, accounting, retention, and exception policies.

Gap 6: no one owns exceptions or closeout

Define owners for failed payments, refunds, duplicate donations, customer disputes, nonprofit ineligibility, consent changes, bank updates, returned payouts, regulator notices, and data corrections. Each exception should have a status, due date, evidence, and escalation path.

Campaign closeout should remove expired creative, finish the calculation, reconcile the ledger, deliver remaining funds, complete required accountings or reports, resolve open complaints, and preserve the final record. Annual programs also need renewal and re-verification triggers.

Test the workflow before launch and after material changes. The state charity regulator directory helps teams find current authorities when a program enters a new jurisdiction. A change in state, partner, fee, interface, or funds flow can reopen the legal and operational analysis.

Implementation review. Use a launch-readiness review that follows one sample dollar through the program. Start with the customer message and consent, then trace authorization, processor settlement, charitable custody, ledger entry, receipt, nonprofit eligibility, payout approval, bank transfer, reconciliation, impact report, and required regulatory report.

For every handoff, identify the system of record and the evidence that proves completion. A webhook, spreadsheet status, bank entry, and regulator confirmation are not interchangeable. Where systems use different IDs, maintain a durable crosswalk so a support or audit request can move from the customer transaction to the nonprofit payout.

Set service levels for exceptions. A failed receipt, eligibility alert, refund, returned payout, bank change, complaint, or regulator notice should have an owner, response time, escalation threshold, and approved resolution. Review exception patterns monthly and update the product or policy when one cause repeats.

Perform a periodic control test with transactions selected from different channels, nonprofits, states, amounts, and statuses. Recalculate the charitable amount independently and verify the associated disclosure, receipt, payout, and report. Document failures and retest the fix. This discipline turns an online donation feature into an accountable operating program and helps the company show regulators, nonprofits, and customers exactly how charitable funds moved.

Govern the program as a product, not a one-time campaign. Maintain a named product owner, legal owner, finance owner, nonprofit operations owner, and incident contact. Review the risk register, regulator updates, nonprofit eligibility policy, disclosure library, receipt templates, integration health, unresolved balances, and exception aging on a defined cadence.

Document how vendors fit into the control environment. A contract should cover service scope, data, security, subcontractors, funds custody, payment timing, records, audit support, complaints, regulatory cooperation, business continuity, and termination. Vendor status should never be the only proof that a legal duty was completed.

Finally, make the program understandable to a new employee. A concise operating guide should show the parties, funds flow, decision owners, applicable categories, launch gates, system IDs, support paths, and closeout steps. If the team cannot explain the program without relying on one person's memory, the gaps are likely to return as volume grows.

Include nonprofit feedback in the control review. Ask whether payments arrive with usable remittance data, whether consent requests are understandable, whether support responses resolve issues, and whether public impact statements match the organization's records. A donation program is incomplete if it works for customers and internal teams but creates unexplained balances or administrative burden for recipient charities.

Review public help content with the same care as checkout. Support pages should explain the donor, recipient, tax acknowledgment, fees, payout timing, refunds, and nonprofit eligibility consistently. An outdated FAQ can create confusion even when the transaction screen is correct.

Frequently asked questions

What is the first step in reviewing an online donation program?

Create a role and funds-flow map that identifies who solicits, receives, controls, receipts, verifies, disburses, reports, and handles complaints.

Can the same donate button have different legal structures?

Yes. Similar interfaces can represent a customer donation, company-funded contribution, commercial co-venture, platform solicitation, or another arrangement.

How often should nonprofit status be checked?

Check at onboarding and at material events required by the program or law, such as campaign launch or payout, with monitoring between those events.

What records should the ledger connect?

Connect campaign, donor or customer, transaction, nonprofit, receipt, fee, refund, settlement, payout, exception, and required report.

What belongs in campaign closeout?

Remove expired claims, reconcile transactions, deliver funds, complete accountings and reports, resolve exceptions, confirm nonprofit receipt, and retain the final record.

This article provides general information, not legal, tax, or accounting advice. Consult qualified advisers about your specific program and jurisdictions.

Tablet of Contents
This is also a heading
This is also a heading

Explore Other Resources

Change and Finix Simplify Corporate Giving Through Embedded Payouts

Change and Finix Simplify Corporate Giving Through Embedded Payouts

Why charitable campaign compliance matters

Why charitable campaign compliance matters

Cause marketing: what legal teams need marketers to know

Cause marketing: what legal teams need marketers to know

Stay up to date with Change
Product
Charitable RegistrationsCCV FilingsDonations APIComplianceNonprofit VerificationsDisbursements
Solutions
By Use Case
Donations at CheckoutSweepstakes & AuctionsLoyalty ProgramsCorporate GiftingRound-Ups
By Company Type
Commercial Co-VenturersProfessional FundraisersLaw FirmsLegal Service ProvidersCharitable Fundraising PlatformsPayment ProcessorsCorporate Foundations
Resources
BlogCustomer StoriesGuidesPricing for Legal TeamsPricing for CompaniesFAQHelp CenterAPI DocsReferral Program
For Nonprofits
Claim Your NonprofitWhat is Change?FAQ for Nonprofits
Company
AboutPressSecurityContact UsPrivacy PolicyTerms
SOC 2 Type II badge
Change logo in white
© 2026 GetChange Corp.
Request a demo
Request a demo
Request a demo
Request a demo
Request a demo