Donors trust you with their data. Six states now check
ComplyMo audits donation pages, honors Global Privacy Control and holds trackers until supporters agree.
14-day free trial · card needed to start, cancel before day 14 and you pay nothing
Not ready? Check your site free or see pricing.
States apply their privacy laws to nonprofits
Source: Oregon DOJ nonprofit FAQ (Jan 28, 2026) (opens in a new tab)WCAG 2.1 AA deadline for HHS-funded nonprofits with 15 or more employees
Source: Federal Register, 91 FR 25496 (May 11, 2026) (opens in a new tab)Oregon and Delaware began requiring nonprofits to honor opt-out signals like GPC
Source: Oregon DOJ privacy page (May 14, 2026) (opens in a new tab)Where you're exposed, and what ComplyMo does
Donation forms
Amount fields without labels turn away supporters who use a screen reader.
Audits flag each unlabeled field with the WCAG rule it breaks.
Trackers on donation pages
Ad pixels that ignore a GPC signal are what Oregon, Colorado and Delaware now check for.
Known trackers wait for consent, GPC is honored, and the record shows it.
EU supporters
Tracking cookies on EU visitors can bring the GDPR in.
Opt-in for the EU and UK, opt-out for US states.
What ComplyMo does, and what it doesn't
ComplyMo does
- Audits donation and event pages for WCAG 2.2 issues
- Honors Global Privacy Control and holds trackers until consent
- Keeps an exportable record of every consent choice
ComplyMo doesn't
- It doesn't manage donor data or your CRM
- It doesn't decide if a donor-list swap is a sale
- The menu helps supporters; it isn't conformance on its own
What changed lately
Frequently asked questions
Do state privacy laws apply to us as a nonprofit?
Colorado, Oregon, Delaware, New Jersey, Minnesota and Maryland cover nonprofits that meet their thresholds. California's CCPA generally doesn't.
Do we have to honor Global Privacy Control?
In Colorado since July 1, 2024, and in Delaware and Oregon since January 1, 2026. New Jersey requires honoring opt-out signals as well.
We have donors in Europe. Does the GDPR apply?
It can, if you target people in the EU or monitor them, and tracking cookies count as monitoring. A site that's merely reachable from the EU isn't enough on its own.
We get HHS grants. What's our accessibility deadline?
WCAG 2.1 AA by May 11, 2027 with 15 or more employees, or May 10, 2028 with fewer. Grants from other agencies follow those agencies' own Section 504 rules.
Keep every supporter's trust, and their choices
14-day free trial · card needed to start, cancel before day 14 and you pay nothing