Most nonprofits are built on trust. Donors give because they believe in your mission. Staff and volunteers show up because they believe in your leadership. Boards govern because they believe in your integrity. That trust is fragile, and one overlooked policy can shatter it faster than almost anything else.
A whistleblower policy is one of those documents that quietly protects everything you’ve built. It tells your team: if something is wrong, you can speak up safely. Without it, problems fester in silence. With it, your organization has a real shot at catching issues early, fixing them, and coming out stronger.
The IRS Form 990 actually asks whether your nonprofit has a whistleblower policy in place. That alone should tell you how seriously the sector takes this. Below, you’ll find three ready-to-use samples you can adapt for your organization today.
3 Nonprofit Whistleblower Policy Samples
Every nonprofit is different in size, structure, and culture, so one policy template doesn’t fit all. These three samples cover different organizational needs, from lean grassroots nonprofits to larger, more structured organizations.
1. Simple Whistleblower Policy for Small Nonprofits
WHISTLEBLOWER POLICY
[Organization Name]
Effective Date: [Date]
Purpose
[Organization Name] is committed to maintaining the highest standards of ethical conduct and accountability. This policy encourages staff, volunteers, and board members to report any concerns about suspected misconduct, fraud, or violations of law without fear of retaliation.
Scope
This policy applies to all employees, volunteers, contractors, and board members of [Organization Name].
Reporting Concerns
Any individual covered by this policy who has a reasonable belief that a violation has occurred is encouraged to report the concern promptly. Reports may be made to:
- The Executive Director
- The Board Chair
- Any member of the Board of Directors
If the concern involves the Executive Director, it should be reported directly to the Board Chair or any board member.
Reports may be made verbally or in writing. While anonymous reports are accepted, providing contact information allows for a more thorough investigation.
Protection Against Retaliation
[Organization Name] strictly prohibits retaliation against any individual who in good faith reports a concern under this policy. Retaliation includes termination, demotion, suspension, harassment, or any other adverse action.
Any employee or volunteer found to have retaliated against a reporting individual will be subject to disciplinary action, up to and including termination.
Investigation
All reports will be taken seriously and investigated promptly and confidentially. The Board Chair or a designated board committee will oversee investigations involving senior staff. Findings will be reported to the full board as appropriate.
False Reports
This policy is not intended to cover bad faith or malicious accusations. Individuals who knowingly make false reports may be subject to disciplinary action.
Confidentiality
To the extent possible, the identity of the reporting individual will be kept confidential throughout the investigation process.
Policy Review
This policy will be reviewed annually by the Board of Directors.
Adopted by the Board of Directors on [Date]
Board Chair Signature: ___________________
Date: ___________________
2. Comprehensive Whistleblower Policy for Mid-Size Nonprofits
WHISTLEBLOWER POLICY
[Organization Name]
Adopted: [Date] | Last Reviewed: [Date]
1. Policy Statement
[Organization Name] is dedicated to operating with transparency, integrity, and full compliance with applicable laws and regulations. This Whistleblower Policy establishes a formal process for reporting concerns about suspected fraud, waste, abuse, unethical conduct, or legal violations, and ensures that those who come forward in good faith are protected from retaliation.
2. Who This Policy Covers
This policy applies to:
- All full-time and part-time employees
- Independent contractors and consultants
- Interns and volunteers
- Members of the Board of Directors
3. What to Report
Covered individuals are encouraged to report any of the following:
- Theft, embezzlement, or financial fraud
- Falsification of financial records or donor reports
- Misuse of organizational funds or assets
- Violations of federal, state, or local law
- Conflicts of interest that have not been disclosed
- Harassment, abuse, or unsafe working conditions
- Any other conduct that violates [Organization Name]’s policies or ethical standards
4. How to Make a Report
Reports may be submitted through any of the following channels:
| Reporting Channel | Contact |
|---|---|
| Executive Director | [email/phone] |
| Board Chair | [email/phone] |
| Audit Committee Chair | [email/phone] |
| Anonymous Tip Line (if available) | [phone/web link] |
If the concern involves the Executive Director, bypass that channel and report directly to the Board Chair or Audit Committee Chair.
Written reports are preferred but not required. If reporting in person or by phone, the receiving party will document the concern in writing.
5. Anonymous Reporting
Anonymous reports are accepted and will be investigated to the fullest extent possible. However, anonymous reporters should be aware that a lack of identifying information may limit the organization’s ability to conduct a thorough investigation or follow up with the reporter.
6. Confidentiality
[Organization Name] will make every reasonable effort to maintain the confidentiality of the reporting individual. Information will only be disclosed to those with a need to know for the purposes of investigation or corrective action.
7. Protection Against Retaliation
No employee, volunteer, contractor, or board member who in good faith reports a concern or participates in an investigation will be subject to retaliation of any kind.
Prohibited retaliation includes but is not limited to:
- Termination or demotion
- Reduction in pay or benefits
- Suspension or reassignment
- Hostile treatment or harassment
- Negative performance evaluations tied to the report
Any individual found to have engaged in retaliation will be subject to serious disciplinary action, up to and including termination or removal from the board.
8. Investigation Process
Upon receipt of a report, the following steps will be taken:
- The report will be acknowledged within 5 business days (where the reporter’s identity is known).
- An initial assessment will determine whether a formal investigation is warranted.
- A designated investigator or committee will be assigned, with no conflicts of interest.
- The investigation will be conducted confidentially and completed within a reasonable timeframe.
- Findings and recommended actions will be reported to the Board of Directors.
- Where legally required, findings may be disclosed to appropriate authorities.
9. Responsibilities of Leadership
The Executive Director and all members of management are responsible for:
- Communicating this policy to all staff and volunteers
- Fostering an environment where concerns can be raised without fear
- Taking all reports seriously and responding appropriately
- Ensuring no retaliation occurs against reporting individuals
10. Abuse of This Policy
This policy is not intended to be used as a tool for making malicious or knowingly false accusations. Any individual found to have submitted a report in bad faith may face disciplinary action.
11. Policy Review
This policy will be reviewed by the Audit Committee and the full Board of Directors on an annual basis or following any significant organizational change.
Approved by the Board of Directors
Date: ___________________
Executive Director: ___________________
Board Chair: ___________________
3. Whistleblower Policy with Ethics Hotline Integration for Larger Nonprofits
WHISTLEBLOWER AND ETHICS REPORTING POLICY
[Organization Name]
Version: [X.X] | Effective Date: [Date] | Next Review: [Date]
I. Purpose and Commitment
[Organization Name] holds itself to the highest standards of ethical conduct in all aspects of its operations. This Whistleblower and Ethics Reporting Policy formalizes our commitment to accountability and creates safe, accessible channels for anyone connected to our organization to raise concerns about potential wrongdoing.
This policy reflects our belief that a culture of integrity requires not just good intentions but active systems to surface and address problems.
II. Applicability
This policy covers all individuals who interact with [Organization Name] in any official capacity, including:
- Employees at all levels
- Board members and committee members
- Contractors, vendors, and consultants
- Grant recipients and program partners
- Volunteers and interns
III. Covered Conduct
Reports under this policy may involve:
- Financial misconduct: Fraud, embezzlement, misappropriation of funds, falsified financial statements, or improper use of donor-restricted funds
- Legal violations: Breach of federal, state, or local law, including tax law, employment law, or regulations governing tax-exempt organizations
- Governance failures: Undisclosed conflicts of interest, self-dealing by board members, or violations of fiduciary duties
- Operational misconduct: Falsification of program data, misrepresentation in grant applications or reports, or abuse of organizational resources
- Workplace violations: Harassment, discrimination, retaliation, or creation of an unsafe work environment
- Ethical breaches: Any conduct that contradicts [Organization Name]’s stated values, mission, or code of conduct
IV. Reporting Channels
[Organization Name] provides multiple channels to accommodate varying levels of concern and comfort. All channels are equally valid.
| Channel | Best Used For | Contact Information |
|---|---|---|
| Direct Supervisor | Minor procedural concerns | [Internal contact] |
| Human Resources Director | HR or workplace matters | [Email/phone] |
| Executive Director | Operational or programmatic issues | [Email/phone] |
| Board Chair | Concerns involving senior leadership | [Email/phone] |
| Audit & Finance Committee Chair | Financial or governance concerns | [Email/phone] |
| Ethics Hotline | Any concern, including anonymous | [Phone number / web portal] |
The Ethics Hotline is operated by a third-party provider to ensure independence and confidentiality. It is available 24 hours a day, 7 days a week, in multiple languages.
V. Anonymous Reporting
Anonymous reports submitted through the Ethics Hotline will be investigated fully and given the same weight as identified reports. The organization will not attempt to identify anonymous reporters. Where additional information is needed, investigators may post a response through the anonymous reporting portal inviting the reporter to provide further detail.
VI. Confidentiality and Information Handling
All reports and related information will be treated as strictly confidential. Access will be limited to those directly involved in the investigation. Information will not be shared with others in the organization except on a need-to-know basis. Disclosure to external parties will only occur where legally required or where necessary to prevent harm.
VII. Non-Retaliation
[Organization Name] has zero tolerance for retaliation against any individual who:
- Reports a concern under this policy in good faith
- Cooperates with or participates in an investigation
- Refuses to participate in conduct that may violate this policy
- Provides testimony in connection with a legal or regulatory proceeding
Retaliation in any form, including indirect retaliation through colleagues, is prohibited. Any substantiated retaliation will result in immediate disciplinary action, up to and including termination. The reporter may also have legal rights under applicable whistleblower protection statutes.
VIII. Investigation Procedures
Step 1 – Receipt and Acknowledgment The designated point of contact will acknowledge receipt of the report within 3 business days (for identified reporters) and log the concern securely.
Step 2 – Preliminary Review Within 10 business days, a preliminary review will be conducted to assess the nature and credibility of the reported concern.
Step 3 – Formal Investigation If warranted, a formal investigation will be initiated by a qualified, conflict-free investigator or committee. Timelines will depend on the complexity of the matter but will not exceed 60 days without documented justification.
Step 4 – Findings and Action Investigation findings will be documented and presented to the Audit and Finance Committee and the full Board of Directors. Corrective actions, including disciplinary measures, policy changes, or referrals to law enforcement, will be determined by the Board.
Step 5 – Follow-Up Where the reporter’s identity is known and it is safe to do so, the reporter will be informed that the matter has been addressed, within the limits of confidentiality.
IX. Roles and Responsibilities
- Board of Directors: Ultimate oversight of this policy and accountability for its enforcement
- Audit and Finance Committee: Oversight of financial and governance-related reports and annual policy review
- Executive Director: Day-to-day implementation, staff communication, and escalation to the Board as needed
- HR Director: Handling of workplace-related reports and coordination with the Executive Director
- All Staff and Volunteers: Familiarity with this policy and responsibility to report known concerns in good faith
X. Training and Communication
This policy will be distributed to all covered individuals upon adoption and at least annually thereafter. New employees and board members will receive this policy as part of their onboarding. Training on ethical conduct and reporting obligations will be provided to all staff at least once per year.
XI. Related Policies
This policy should be read in conjunction with:
- [Organization Name] Code of Ethics
- Conflict of Interest Policy
- Document Retention and Destruction Policy
- Financial Controls Policy
XII. Policy Administration and Review
This policy is owned by the Audit and Finance Committee and will be reviewed annually. Any proposed amendments require approval by the full Board of Directors.
Adopted by the Board of Directors on [Date]
Board Chair: ___________________ Date: ___________________
Executive Director: ___________________ Date: ___________________
Audit and Finance Committee Chair: ___________________ Date: ___________________
Wrapping Up
The right policy for your nonprofit depends on your size, structure, and risk exposure. A small volunteer-run organization may only need the first sample, while a larger nonprofit handling significant public funds will benefit from the comprehensive third version with a dedicated ethics hotline. What matters most is that your policy is clear, accessible, and actually enforced.
Pick the sample that fits best, customize it with your organization’s details, and have it reviewed by legal counsel before adoption. Then make it visible. A policy that lives only in a filing cabinet protects no one.