Does a small nonprofit need an email retention policy for donor and grant communications?

Yes. Size does not exempt an organization from recordkeeping obligations, and for a small nonprofit, donor and grant email often carries some of the most consequential information you hold. A short, written email retention policy protects the organization, its funders, and its donors.

Why these emails matter

Email is rarely “just correspondence.” Messages about donor and grant activity frequently function as records of business decisions and financial events. Common examples include:

• Pledge and gift confirmations, restricted-gift instructions, and acknowledgment letters
• Grant applications, award letters, scope changes, and reporting deadlines
• Substantiation for tax-related contributions and the corresponding receipts
• Communications that document donor intent, consent, or privacy preferences

Because some of these messages support financial statements, audits, and tax filings, they need to be kept long enough to satisfy those obligations. The IRS notes that the required retention period for a record depends on the action, expense, or event it documents, so a blanket “delete everything after a year” rule is risky.

What a policy should cover

A defensible policy does not have to be long. At minimum, it should:

• Define which categories of email are records (gifts, grants, financial, governance) versus transitory messages
• Assign a retention period to each category, tied to its business and legal purpose
• State who is responsible and how disposition (deletion) is approved and documented
• Address legal holds, so deletion stops when litigation, audit, or investigation is foreseeable
• Reflect donor privacy commitments and any conditions attached by grantors

The goal is consistency. A retention schedule lets you keep what you must, dispose of what you no longer need, and prove you acted by rule rather than convenience.

Keeping it manageable

You do not need enterprise tooling to start. Map your email categories, set reasonable retention periods (often aligned to your financial and audit cycles), and apply them uniformly. International guidance such as ISO 15489-1 frames records management around authentic, reliable, and usable records with documented retention and disposition — principles that scale down to a two-person shop as readily as a large agency.

When in doubt about a specific tax or grant requirement, confirm the actual obligation before setting a period rather than guessing.

For related guidance, see the email and messaging topic hub.