Microsoft 365 Nonprofit Grants: What's Covered and Where the Gaps Are

In June 2026, Ronald Khosla logged into Canopy's Microsoft 365 account and found years of investment records, project files, and institutional history gone. Khosla's climate-focused nonprofit renewed its license the previous October and received confirmation from Microsoft that access would run through October 2026. Instead, the data disappeared five months early, and Microsoft eventually told him it was permanent. According to Cybernews, roughly 171,000 small nonprofits lost their OneDrive contents the same way after Microsoft retired a legacy grant tier.

That is the risk of building an organization's technology stack around a grant program without knowing exactly what it covers, what it does not, and what happens when the terms change. For nonprofits and associations across the Ottawa region, that distinction matters more now than it did two years ago. Microsoft's nonprofit licensing program is still one of the most valuable technology benefits available to the sector, but the free tier looks very different from what it did before July 2025, and the eligibility rules get considerably more complicated the moment an organization calls itself an "association."

Here is what the current Microsoft 365 nonprofit offer actually includes, where nonprofits get caught off guard, and how the picture changes again for associations specifically.

The Free Grant Isn't What It Used to Be

For over a decade, Microsoft's flagship nonprofit offer was Microsoft 365 Business Premium: up to 10 free seats with the full desktop Office suite, hosted email, Teams, SharePoint, and a security stack that included Defender for Business and Intune device management. Effective July 1, 2025, Microsoft retired that free tier along with the Office 365 E1 grant. Organizations with licenses already provisioned kept them until their next renewal date, and for most, that renewal has already passed.

The standing free offer is Microsoft 365 Business Basic, granted at no cost for up to 300 users. Microsoft's own eligibility documentation confirms Business Basic is now the primary cloud grant, with Business Premium and other plans available at nonprofit discount pricing rather than as a donation.

What Business Basic Actually Gives You

Three hundred free seats is more capacity than most small and mid-sized nonprofits will ever fill. Business Basic includes web and mobile versions of Word, Excel, and PowerPoint; hosted email through Exchange Online; Teams; SharePoint; and 1 TB of OneDrive storage per user.

What it does not include is the part that trips organizations up: the installed desktop versions of the Office apps, and the security layer that used to ship with the old Business Premium grant. There is no Defender for Business endpoint protection, no Intune for managing staff devices, and no Purview data loss prevention. Multi-factor authentication is available and should be turned on for every account, but that's about the extent of the built-in security posture on the free tier.

For an organization handling donor records, financial data, or health information, that gap is not cosmetic. It is the difference between a properly protected environment and one running on defaults.

Business Premium Still Exists. It's Discounted, Not Donated.

Nonprofits that need the desktop apps or the fuller security stack can still get Business Premium at nonprofit pricing, generally discounted up to 75% off the commercial rate. It is no longer free. The practical model most Ottawa-area nonprofits land on is a mix: general staff on the free Business Basic grant, and paid Business Premium seats reserved for the roles that actually open donor files, financial records, or protected personal information.

Microsoft Copilot Chat is included in a Microsoft 365 subscription at no additional cost, which is worth knowing before an organization assumes an AI add-on requires a separate purchase. The paid Copilot agent tier is a discounted add-on rather than part of the grant, and it is worth evaluating carefully rather than layering onto an environment that has not yet been secured properly. Our Microsoft Copilot page covers how that fits into a properly configured Microsoft 365 tenant.

Eligibility Now Runs Through Microsoft Directly

Validation for the cloud offers now runs through Microsoft's own nonprofit registration process rather than a step historically routed through TechSoup. Organizations need a recognized charitable or nonprofit legal status, in Canada that generally means CRA registered charity or qualified donee status, and review can take up to a week. Registration also has to be completed by an employee or strategic volunteer of the organization itself, not by an outside IT provider acting on the nonprofit's behalf.

None of this is a reason to avoid the program. It is a reason to plan the licensing mix deliberately instead of assuming the grant will quietly cover everything the way it once did, and to treat backup as a separate responsibility from day one. OneDrive's retention and recycle-bin features are not a substitute for a real backup strategy, which is precisely the gap that caught the organizations in the Cybernews report.

For Associations, the First Question Isn't Licensing. It's Whether You Qualify at All.

Here is where the picture changes for a large share of the associations we work with. Many organizations that call themselves "associations" assume that operating as a nonprofit is enough to qualify for Microsoft's grant program. It is not automatic.

Microsoft's published eligibility criteria explicitly list professional, commerce, and trade associations as ineligible for the nonprofit program. That exclusion applies regardless of how the organization is incorporated or how its mission statement is written. Microsoft evaluates actual activity, not legal structure alone. An association organized primarily to represent the commercial or professional interests of its members, rather than to deliver a charitable or public-benefit mission, generally does not qualify on its own.

The distinction that matters is whether the association holds separate, recognized charitable status. In Canada, that means CRA registration as a charity or qualified donee, distinct from simply being incorporated as a not-for-profit. Medical, health, and public-education associations built around research, continuing education, or public health advocacy can often meet that bar because those activities are charitable in nature. A pure trade group organized to lobby on behalf of member businesses typically cannot, no matter how the bylaws describe its purpose.

This is worth confirming before an association builds a technology budget around a grant that may never materialize.

Who Counts As "Staff" Gets More Complicated for Membership Organizations

Associations tend to run on a different staffing model than a typical charity: a small paid administrative team supporting a much larger volunteer board, committee structure, and chapter network. Microsoft's grant licenses are allocated to paid staff and executive leadership. Members, donors, and general volunteers are not eligible for the free or discounted seats, even when they are actively doing substantial work on the association's behalf.

For an association running national committees or regional chapters largely through volunteer labour, that means the grant covers a smaller slice of the people actually touching the organization's systems than it first appears to. Planning for guest access, shared mailboxes, and controlled member portals through SharePoint or Teams, rather than assuming every active volunteer gets a licensed seat, tends to be the more realistic model.

The Member Data Problem Doesn't Show Up in the Licensing Terms

Associations also carry a data footprint the grant tier was never built around: membership databases, credential and certification records, event registrations, and dues payment history. None of that is native to Business Basic, and most associations end up layering a membership management platform on top of Microsoft 365 rather than replacing it. That integration, and the access controls around who inside and outside the organization can reach member records, is where a generic nonprofit IT setup and an association's actual risk profile start to diverge.

This is the piece we spend the most time on with association clients: not just getting the grant provisioned correctly, but building the security and access model around it once it is in place. Our Microsoft 365 for Associations work starts by mapping exactly this: who needs a licensed seat, who needs guest access, and where member data actually lives.

Getting the Grant Set Up Is the Easy Part

Whether an organization is a straightforward registered charity or a professional association navigating eligibility rules, the pattern we see most often is the same. The grant gets claimed, licenses get assigned, and the security configuration gets left at Microsoft's defaults. That is how 171,000 organizations ended up learning the hard way that a license grant and a backup plan are not the same thing.

If your organization is trying to figure out whether it actually qualifies for Microsoft's nonprofit program, or whether your current Microsoft 365 environment has the security layer it needs, we are glad to walk through it. For more on how we approach this for the associations we serve, see our IT Services for Nonprofit Associations page, or call us at 1-800-864-2797.