Registered charities and nonprofits in Canada operate under constraints that commercial businesses do not face: budget pressures that make every recurring expense a deliberate choice, donor relationships that depend on demonstrated trustworthiness, and regulatory requirements from CRA that intersect with how digital fundraising and data collection work. Hosting decisions for a nonprofit are not purely technical choices.
Donor data and PIPEDA obligations
When a donor makes an online contribution to a Canadian charity, they provide personal information: name, email address, mailing address, and payment details. This is personal information under PIPEDA. The organization collecting it is responsible for its protection, and the hosting provider storing it is a third-party processor with corresponding obligations. The same requirements that apply to commercial businesses apply to nonprofits and registered charities: you need a privacy policy, you need appropriate technical safeguards, and you need to understand where your data is stored. PIPEDA does not grant nonprofit status an exemption from privacy obligations. For organizations with Quebec donors, Law 25 applies in addition to PIPEDA.
CRA requirements for online fundraising
CRA has specific requirements for charities issuing donation receipts and for the presentation of charitable solicitations online. While these requirements do not directly specify hosting technology, they do require that donation receipts be issued correctly, that the organization's registered charity number be displayed on its website and in solicitation materials, and that the organization maintain records. A website that processes donations must reliably deliver receipt emails (which requires correctly configured email authentication), maintain records of transactions for CRA audit purposes, and present the organization's registration information accurately. These requirements translate into practical hosting needs: reliable email delivery, database backups that meet CRA record retention requirements, and uptime adequate for donation processing.
What hosting tier makes sense for most Canadian nonprofits
Most small and medium Canadian nonprofits run their websites on shared hosting or an entry-level VPS. A WordPress site with a donation plugin like GiveWP, Charitable, or Stripe Checkout integration runs adequately on shared hosting if the traffic is moderate and the donation volume is not processing hundreds of concurrent transactions. The threshold where shared hosting becomes inadequate is roughly the same as for commercial sites: consistent traffic above a few hundred daily visitors, or any e-commerce-like functionality (including donation processing) that requires reliable PHP execution under concurrent load.
For nonprofits managing a donor database, a membership registry, or any personally identifiable information about beneficiaries or clients, the data sovereignty argument for Canadian hosting is particularly strong. A registered Canadian charity whose donor database sits on a US server is in a less defensible position under PIPEDA than one whose data is on Canadian infrastructure. The cost difference between Canadian shared hosting and US shared hosting at comparable quality levels is small enough that it should not be the deciding factor.
SSL and payment processing for nonprofit donation pages
A donation page without SSL is unacceptable from both a security and a credibility standpoint. Donors deciding whether to enter payment information on your site look at the browser padlock. An unsigned or expired certificate is a donation lost. Let's Encrypt through AutoSSL on cPanel or Webuzo handles SSL correctly for most nonprofit websites at no cost. For donation processing itself, the best practice is to use a payment gateway (Stripe, PayPal, or a Canadian gateway like Bambora or Moneris) that handles card data on their PCI-compliant infrastructure rather than yours. This approach eliminates PCI DSS scope for your hosting environment entirely.
Discounts and nonprofit pricing for Canadian hosting
Some Canadian hosting providers offer nonprofit or registered charity pricing. It is worth asking directly when evaluating providers. The discount is not universal and varies by provider, but for an organization with budget constraints where every dollar saved on infrastructure is a dollar available for programs, it is a conversation worth having. Prepare to provide your CRA registration number as documentation of nonprofit status.
Gotekky
Need help deciding what to do next?
Tell us what you are seeing and what outcome you need. We will identify whether a managed service, scoped project or paid technical assessment is the right next step.