Another offer of support - drop me a line if you want a hand with not just technical security, but Governance, Risk and Compliance (GRC) aspects to such a proje

Another offer of support - drop me a line if you want a hand with not just technical security, but Governance, Risk and Compliance (GRC) aspects to such a project. I suspect a project like this has more complex Governance, Risk and Compliance issues than most. Where possible, work with an existing charity working in this area, as they should already have practices in place to manage this.