
AI and Post-Quantum Cybersecurity: A Migration Playbook
A practical 2026 guide to cryptographic inventory, NIST post-quantum standards, AI-assisted discovery, crypto agility, migration priorities, and release evidence.
Read MoreZharfAI Team

AI can help a nonprofit forecast demand, match resources to cases, find missing records, schedule outreach, and summarize program evidence. It cannot turn a donation into a precisely attributable “micro-impact” merely by multiplying a model score by ten dollars. Financial transparency, organizational accountability, program monitoring, and causal impact are related but distinct forms of evidence.
That distinction should shape the entire system. A tax-exempt organization can run an ineffective program. A highly rated organization may not have evidence for every intervention. An activity count is not an outcome, and an outcome observed after service is not automatically caused by the service.
Write the pathway from resources to activities, outputs, near-term outcomes, and long-term outcomes. Name the assumptions between each step. A food-distribution program may purchase meals, deliver packages, reduce immediate food insecurity, and ultimately support health or school attendance. Each arrow needs evidence and can fail for different reasons.
AI should support a decision on this pathway: predict tomorrow’s caseload, flag a delivery bottleneck, identify eligible households not reached, or estimate which service channel needs more capacity. “Maximize impact” is too vague to optimize and often hides value choices.
Define unacceptable outcomes before modeling: denying emergency aid solely from a score, excluding hard-to-reach communities because delivery costs more, or treating a donor’s predicted lifetime value as more important than beneficiary safety.
In the United States, the IRS Tax Exempt Organization Search can help verify federal tax-exempt status and access certain filings. Its scope is US federal tax administration. A listing or Form 990 does not prove that a particular program causes beneficial outcomes.
Third-party ratings also need careful reading. Charity Navigator’s March 2026 Rating Methodology Guide describes multiple beacons, data sources, eligibility rules, and approaches to accountability, finance, culture, leadership, and impact or measurement. It is a private methodology, not a regulator’s approval or universal measure of social value.
Use these sources for due diligence within their scope. Do not collapse incorporation, tax status, clean audits, governance policies, outcome measurement, and causal evidence into one “trust score.”
Program teams and affected communities should define what success means. A shelter may count occupied beds, but residents may prioritize safety, stable housing, family continuity, privacy, and respectful treatment. A training program may count certificates while participants care about durable employment, wages, working conditions, and accessibility.
Use interviews, advisory panels, accessible surveys, complaint channels, and compensated participation. Include people who left or were screened out; surveying only successful completers creates a flattering sample. Record disagreements rather than averaging away competing priorities.
This is also where automation boundaries emerge. Human approval design should give staff meaningful context and authority, not require them to click through a predetermined recommendation.
Map every field to a source, purpose, owner, legal basis or consent pathway, retention period, and allowed use. Separate service-delivery records from fundraising profiles. A person who receives aid should not be silently converted into a donor-prospect record.
Use stable identifiers carefully, reconcile duplicates, and preserve change history. Monitor missing values, late partner files, inconsistent outcome definitions, and sudden jumps after a form redesign. Data-quality and observability practices are essential because nonprofit datasets are often assembled across grants, contractors, spreadsheets, and crisis workflows.
Collect less when possible. Sensitive data about health, immigration, violence, religion, disability, or finances can increase harm if breached or repurposed. Use aggregate reporting, role-based access, encryption, short retention, and de-identification appropriate to the re-identification risk.
Optimization can route mobile clinics, schedule volunteers, pack relief supplies, or allocate grant-review capacity. The objective should include service urgency, travel time, staff skills, inventory, local knowledge, continuity of care, and equity constraints—not only cost per case.
Write hard rules for emergency exceptions and minimum service. A remote community may be expensive to reach but still entitled to a floor of coverage. Historical utilization is not pure demand; it reflects previous outreach, trust, eligibility rules, transport, documentation barriers, and discrimination.
Run proposed allocations in shadow mode. Compare them with existing decisions and ask local teams to explain disagreements. During disasters, re-optimize as roads, stock, weather, and security change, but preserve command authority and a manual fallback. This is an operational recommendation, not a legal standard.
Monitoring asks whether activities happened. Process evaluation asks how implementation worked. Outcome evaluation asks whether participant outcomes changed. Impact evaluation asks what would have happened without the program and therefore needs a credible counterfactual.
J-PAL’s Introduction to randomized evaluations explains how random assignment can estimate causal effects and when randomized evaluation may or may not be suitable. It is a research-method resource, not a requirement that every nonprofit randomize services.
Randomization may be inappropriate or infeasible when withholding service is unethical, sample size is small, spillovers are central, or implementation is changing. Alternatives include phased rollout, regression discontinuity, difference-in-differences, matched comparisons, interrupted time series, qualitative work, and contribution analysis. Each has assumptions and limitations that must be stated.
A risk model predicts who may experience an outcome under historical conditions. It does not tell whether giving a service to that person will improve the outcome. Selecting the highest-risk people may be appropriate for need, but selecting those with the largest predicted treatment benefit is a different and harder problem.
Do not train a “program success” model only on people who completed the program. Completion is affected by transport, staff decisions, eligibility, and motivation. Use a defined index date, prevent future information from entering features, and evaluate across time, sites, partners, and populations.
When estimating heterogeneous effects, pre-specify the question and use methods appropriate to the study design. Small subgroup estimates are unstable and can create discriminatory service rules. Treat them as hypotheses until independently validated.
The OECD’s Evaluating Development Co-operation guidance discusses relevance, coherence, effectiveness, efficiency, impact, and sustainability. These are evaluation lenses, not a formula for an AI-generated universal charity ranking.
Relevance asks whether the intervention responds to priorities and context. Coherence considers fit with other work. Effectiveness examines achievement of objectives. Efficiency considers the relationship between resources and results. Impact looks at wider effects, and sustainability at whether benefits endure.
Report evidence under each relevant lens, including trade-offs and negative effects. Do not average six uncertain judgments into a precise number that obscures the underlying record.
An eligibility or prioritization model can encode past exclusion. Audit who is missing, who receives service, who is referred elsewhere, who drops out, and who appeals. Compare performance and outcomes across geography and relevant groups where lawful and ethical.
Give applicants and beneficiaries a plain-language explanation of data use, a way to correct records, and a route to human review. Avoid requesting sensitive fields solely because they might improve accuracy. Do not infer vulnerability, immigration status, or mental health from unrelated digital behavior.
Beneficiary feedback must not affect access to essential aid. Anonymous channels and independent safeguarding paths may be necessary. Translate materials, support disability access, and fund community partners who help interpret local consequences.
Donor segmentation can help plan communications, but it creates privacy and manipulation risks. Set rules for data enrichment, wealth screening, sensitive inference, automated messaging, and suppression lists. A donor’s capacity or predicted propensity should not influence program eligibility or staff treatment.
Generative systems may draft appeals, but factual claims about need, cost, and impact require review. Avoid synthetic testimonials, fabricated urgency, and personalized pressure aimed at grief, illness, religion, or financial vulnerability. Preserve approval records and the source behind quantitative claims.
Fundraising law and privacy obligations vary by jurisdiction and channel. Map them separately; a nonprofit status does not exempt an organization from marketing, data-protection, consumer-protection, or payment rules.
Models can surface duplicate invoices, unusual vendor patterns, conflicting beneficiary identifiers, or grants that need additional review. An anomaly is not fraud. Create a proportionate investigation process, protect whistleblowers, separate duties, and give affected parties a chance to provide context.
High-risk actions—freezing aid, rejecting a grant, reporting suspected crime, or publishing an allegation—require authorized human review and documented evidence. Measure false positives and the burden placed on legitimate partners. Small grassroots organizations may look anomalous because their records differ from large institutions.
For payment and identity controls, the risk architecture used in AI for payments, fraud, and identity can help, provided the organization adapts thresholds to humanitarian consequences.
Track inputs, outputs, outcomes, service quality, safeguarding, equity, and cost. State the time horizon and denominator. “Cost per participant” differs from “cost per participant achieving a sustained outcome.” Administrative costs can support safeguarding, data quality, staff retention, and learning; a low overhead ratio is not automatically high impact.
Use confidence intervals and sensitivity analysis when estimates depend on missing data, attribution assumptions, or unit costs. Separate observed results from modeled projections. Reconcile dashboards with finance systems and grant definitions.
Avoid aggregating distinct people into a single “lives changed” number without a published method. If monetizing social value, disclose assumptions, discounting, displacement, deadweight, attribution, and uncertainty.
The board and executive team should approve the purpose, risk tier, evaluation plan, and automation boundaries. Program leaders own service policy; safeguarding owns harm escalation; finance owns financial controls; research or learning teams own evaluation quality; data teams own technical operation.
Vendor contracts should cover security, data ownership, model changes, subcontractors, deletion, audit rights, incident notice, and exit. Do not lock core program records inside a proprietary score. Maintain documentation and staff capacity after a pilot funder leaves.
Create a model and evaluation register. Review high-impact systems at least annually and after major program, population, policy, or data changes. Publish a proportionate transparency note so donors and communities can understand where AI is used.
Choose one low- or moderate-risk decision with reliable outcomes, such as volunteer scheduling or stock forecasting. Establish a baseline and map data. Run the model silently, review errors with frontline staff and community representatives, then pilot recommendations with human control.
Do not begin with automatic denial of aid or an “impact score” for every beneficiary. Add automation only after the team demonstrates data quality, operational benefit, safeguards, and a fallback. Re-evaluate when expanding to a new region or partner.
Sources reviewed and links checked on 2026-07-30:

A practical 2026 guide to cryptographic inventory, NIST post-quantum standards, AI-assisted discovery, crypto agility, migration priorities, and release evidence.
Read More
From approvals to multi-step operations: How agentic AI turns fragmented business processes into governed, observable workflows.
Read More
A field-service operating model for trustworthy asset data, predictive maintenance, constrained dispatch, technician evidence, and safe return to service.
Read MoreSee the daily briefing and the operational guides. This page is an archive note, not an invitation to start a project.