Nonprofit Financial Controls: Stop Relying on Handshake Agreements
"We've known each other for years, we don't need paperwork." Those words have cost nonprofits thousands of dollars, damaged relationships, and in some cases, ended organizations entirely.
As a nonprofit accountant, I have seen this scenario play out more times than I can count. A board member brings in a longtime friend to handle bookkeeping. A founding donor offers to manage the website "as a favor." A volunteer steps up to oversee payroll "just temporarily." Everyone involved has the best intentions and no written agreement in sight.
Then something goes wrong. Money goes unaccounted for. Expectations weren't aligned. The "temporary" arrangement stretches into years with no defined scope. And suddenly, a trusted friendship becomes the centerpiece of a financial dispute or worse, a compliance investigation.
Here's the truth: formal written agreements aren't a sign that you don't trust someone. They're a sign that you respect both the relationship and the organization you're entrusted to protect.
Why Nonprofits Are Especially Vulnerable
Nonprofits run on relationships. They're built by passionate people who trust one another, rely on goodwill, and often operate with lean teams where roles blur. That culture of trust is a strength but it also creates a gap that informal arrangements love to fill.
Unlike a for-profit business, a nonprofit is accountable not just to its board, but to donors, grantors, the IRS, and the public. That means every financial arrangement regardless of how friendly carries a higher standard of transparency and documentation.
Accountant's Note
The IRS Form 990 requires nonprofits to disclose transactions with interested parties and describe policies around conflicts of interest. Informal arrangements with friends, family members, or board members can trigger scrutiny even when completely innocent if they aren't properly documented.
What Can Go Wrong Without a Written Agreement
Let's be specific. Here are some of the most common situations I've seen unravel when organizations relied on a handshake instead of a contract:
A bookkeeper who is also a friend begins making disbursements without dual authorization "We always did it that way verbally" and the board has no written policy to point to.
A volunteer contractor believes their work entitles them to compensation because the original conversation was ambiguous. There is no written scope of work or payment terms.
A board member's spouse performs services for the organization at below-market rate. Without a documented conflict-of-interest disclosure and approval process, this can look like self-dealing to auditors.
A donor-funded project is managed by a friend of the executive director with no written deliverables. When the grant funder asks for documentation, there's nothing to show.
An informal "temporary" arrangement stretches for three years, creating de facto employee status with potential tax and labor law implications that nobody anticipated.
The Friend Factor: Why It Makes Things Harder, Not Easier
When the person you're working with is a friend, the natural instinct is to loosen the formality. That instinct is understandable but it's also exactly backward from what protects both of you.
A written agreement doesn't signal distrust. It signals professionalism. It says: I value you enough to be clear about expectations, compensation, scope, and boundaries. It removes the guesswork that damages relationships when something doesn't go as planned.
And here's something I remind my clients often: if a friendship is real, it will survive a contract. If the contract conversation ends the arrangement — that tells you something important about whether the arrangement was truly healthy to begin with.
67% of nonprofit financial disputes involve parties known personally to leadership often with no written agreement in place
What Every Written Agreement Should Include
You don't need a 40-page legal document for every arrangement. But you do need something in writing that clearly covers the basics. At minimum, any service agreement, vendor contract, or volunteer MOU (Memorandum of Understanding) for a nonprofit should address:
Scope of work— What exactly is the person responsible for? What is outside their scope?
Term and termination— How long does the arrangement last, and how can either party end it?
Compensation (or lack thereof)— Whether paid or volunteer, document it. Volunteers should sign something confirming no compensation is expected.
Access and authorization— What systems, accounts, or financial records can they access, and what approvals are required?
Confidentiality— Financial data, donor information, and organizational records should always be protected by a written confidentiality clause.
Conflict of interest disclosure— Require disclosure of any relationship with board members, major donors, or others with organizational ties.
Deliverables and reporting— For project-based work, define what "done" looks like and how progress will be communicated.
A Note on Internal Financial Controls
Written agreements are one layer of protection. Internal controls are another and they work together. Even the most trusted person in your organization should operate within a system that includes dual authorization on disbursements, regular account reconciliation, segregation of duties, and periodic financial review by the board.
These aren't policies that say "we don't trust you." They're policies that say "we protect our people and our mission." Strong controls actually protect your staff and volunteers from accusations — because the system itself provides the paper trail, not personal memory or goodwill.
Starting the Conversation
I understand that asking a friend to sign a contract can feel awkward. Here's a framing I suggest to my clients: make it a policy, not a personal request. "Our board requires written agreements for all service arrangements I'd love to get you a simple one-pager so we're both covered." That shifts the conversation from personal to procedural, and most people respond well to it.
If someone pushes back on signing even a basic agreement, that's a significant red flag and a sign that having the conversation now is far better than dealing with the fallout later.
The Bottom Line
Your nonprofit exists to serve a mission. Protecting that mission means protecting the organization from financial mismanagement, from compliance risk, and from the ambiguity that erodes trust over time. A handshake is a wonderful gesture. But it is not a job description, a contract, or a control.
Do the people you work with a favor: put it in writing. Your friendship will survive it. Your organization depends on it.
