River
Y CombinatorBacked by Y Combinator

Free template

Nonprofit Policies Required Template

Conflict of interest, whistleblower, document retention and gift acceptance policies, plus sheets that track each review and who must disclose conflicts every year.

Free download · No account needed

What you get

Pack of 9 files: 6 documents, 3 spreadsheets

Nonprofit Policies Required Template
  • How the 990 Answer-key Register WorksDocument
  • Conflict of Interest PolicyDocument
  • Whistleblower PolicyDocument
  • Document Retention and Destruction PolicyDocument
  • Gift Acceptance PolicyDocument
  • Adoption NoteDocument
  • Policy RegisterSpreadsheet
  • Annual Disclosure TrackerSpreadsheet
  • Review CalendarSpreadsheet

How to adopt and review your nonprofit's required policies

Four policies make up the standard set for a US nonprofit: conflict of interest, whistleblower, document retention and destruction, and gift acceptance. Form 990 asks every filer whether its board adopted the first three, and Schedule M asks about the fourth. Federal tax law generally doesn't require any of them, but some states make one or more mandatory. A good set is adopted by board vote, says who must disclose conflicts each year and is reviewed on a schedule.

Adoption takes one board meeting. The protection comes from using the policies: collecting disclosures from everyone they cover, reviewing unusual gifts before you accept them and recording each review.

People with laptops around a long conference table as one of them raises a hand
Adopt each policy by a recorded vote, then review it on schedule. Photo: Christina @ wocintechchat.com M on Unsplash

Find out which policies are required

The IRS considers the policies Form 990 asks about to generally improve tax compliance1, even though the tax code doesn't demand them. Answer Yes only if your board, or a committee it authorized, adopted the policy by year end and it applies to the whole organization.

The policy questions on the return

PolicyWhere it's askedWhat the question covers
Conflict of interestForm 990, Part VI, lines 12a to 12cA written policy, yearly disclosures from officers, directors, trustees and key employees, and how you monitor and enforce it
WhistleblowerForm 990, Part VI, line 13Whether you have a written policy
Document retention and destructionForm 990, Part VI, line 14Whether you have a written policy
Gift acceptanceSchedule M, line 31Whether a policy requires review of nonstandard gifts

You file Schedule M2 if you report more than $25,000 of noncash gifts, or receive art, historical treasures or qualified conservation contributions.

Part VI also asks how you set top pay (line 15) and about joint venture safeguards (line 16). Forms 990-EZ and 990-N ask none of these questions.

State law can go further. New York, for example, requires its nonprofit corporations to adopt a conflict of interest policy3. It also requires a whistleblower policy at those with 20 or more employees4 and more than $1 million in revenue the year before. Check your own state's nonprofit corporation law.

Write the conflict of interest policy

Start from the IRS's sample conflict of interest policy5 in the Form 1023 instructions. An interested person discloses the interest and leaves the room while the rest of the board decides, and the minutes record who disclosed what and any votes taken. Its yearly statement only asks directors, principal officers and members of committees with board powers to confirm they've read the policy and will follow it.

Form 990 asks for more. Line 12b asks whether officers, directors, trustees and key employees must disclose their interests, and their families', every year. Your executive director and top finance person count as officers on the return, whatever their titles. A key employee is anyone else on staff who passes three tests, in order1:

  • The $150,000 test: over $150,000 in reportable pay, counting related organizations, for the calendar year that ends in your tax year.
  • The responsibility test: officer-level influence, or managing a part of the organization (or controlling a share of its budget, capital spending or pay) worth 10% or more of the whole.
  • The top 20 test: being among the 20 highest-paid employees who pass the first two.
ExampleWho goes on the disclosure listAn illustrative example written for this guide. The food bank and its figures are made up.

Total expenses: $2,400,000, so the 10% line is $240,000.

Program director: paid $156,000 and runs a $600,000 food program, 25% of expenses. She passes all three tests and goes on the list.

Development director: paid $128,000. He fails the $150,000 test, so he isn't a key employee, however senior his title.

Finance director: paid $152,000. As the top financial official she counts as an officer and is already on the list.

  • Pay comes first. The tests use calendar-year pay, so a midyear raise can push someone over.
  • Run it every year. Recheck before each disclosure round. The list changes when pay or programs do.

Write the other three policies

The Form 990 instructions describe a whistleblower policy as one that encourages staff and volunteers to come forward1 with credible information on illegal practices or violations of your policies. It also promises protection from retaliation and names who takes the reports. Choose someone outside the reporter's chain of command, such as the audit committee chair, and put the policy in every staff and volunteer handbook.

A document retention and destruction policy sets how long you keep each kind of record, who stores it and who destroys it. Base the periods on real obligations. Federal grant records, for example, must be kept three years from your final financial report6, and longer if an audit, claim or lawsuit starts before then. Add a hold that stops destruction as soon as a lawsuit or investigation looks likely.

Your gift acceptance policy lists the gifts you take without review, such as cash and publicly traded stock. It also lists those that need a decision first: real estate, private company shares, vehicles, art and gifts with conditions. Schedule M asks whether it requires review of nonstandard contributions2. Those are items with no ready market and a value that's hard to pin down, which you don't expect to use for your mission.

Decide before you accept property whether you'll keep it or sell it. If you sell it within three years and the donor valued it at more than $5,000, you must report the sale on Form 82827 within 125 days. Whatever you accept, send the donor a donation acknowledgment letter.

Two federal crimes apply to nonprofits too

Sarbanes-Oxley generally doesn't apply to nonprofits. The Form 990 instructions note that two of its criminal provisions do1: retaliating against a whistleblower who reports a federal offense, and destroying records to obstruct a federal investigation.

Adopt them by board vote

  1. Send the drafts ahead

    Put all four policies in the board meeting packet, so members can raise questions before the vote.

  2. Vote on each one

    Adopt each policy by a recorded vote of the board or a committee it authorized.

  3. Write the minutes promptly

    Form 990 counts minutes as contemporaneous if they are written by the next meeting or within 60 days1, whichever is later.

  4. Hand them out

    Give each policy to the people it covers and collect the first round of conflict disclosures.

  5. Log the dates

    Take the adoption date from the minutes, not the document, and set each policy's review cycle.

Review each policy on a schedule

Nothing on Form 990 asks when you last reviewed a policy, so one adopted 10 years ago still earns a Yes. Set a cycle and keep to it: yearly for conflict of interest, alongside the disclosures, and every two or three years for the rest. A review is a recorded board decision, not a passing mention.

Track two dates per policy: adopted and last reviewed. Review early when something changes, such as a first gift of real estate, a new federal grant, a raise that creates a key employee or a whistleblower report.

Before you file Form 990

  • Each policy's adoption is in the minutes, with its date
  • Officers, directors, trustees and key employees signed this year's disclosure
  • Key employee tests were rerun on last calendar year's pay
  • Every gift that needed review has a written decision
  • No policy is past its review date
  • Schedule O says how you monitor and enforce the conflict policy

When to bring in a lawyer or accountant

This guide covers US rules and isn't legal or tax advice. Ask a lawyer before you accept real estate or a business interest, approve a deal with an insider or act on a whistleblower report. Your accountant can confirm how to answer each line of the return.

The template on this page gives you all four policies and the sheets that track them. Open it with Edit with AI and River builds the Policy Register from your minutes and checks your payroll for key employees before it updates the policies.

How to use this template

Use the files as they are, or open them in River. Begin with the Policy Register: once each policy's adoption and review dates sit on one line, you can see which reviews are overdue. Then edit the four policies and the Adoption Note to match.

With Edit with AI, River asks for your current policies, the board minutes that adopted and reviewed them, and your staff roster with actual pay. It builds the Policy Register first, runs the three key employee tests, checks gifts that arrived since the gift policy was last reviewed and sorts reviews by days overdue. Only then does it update the policies. It won't backdate a review or a disclosure.

  1. Download it or open it in River

    Get the six Word documents and three CSV sheets free, or choose Edit with AI to open all nine in River.

  2. Fill in the Policy Register

    Take each policy's adoption and last review dates from the board minutes, or send River the minutes and it fills them in.

  3. Check who must disclose

    Run the three key employee tests on last calendar year's pay in the Annual Disclosure Tracker.

  4. Adopt, then review on schedule

    Edit the four policies, adopt them by recorded board vote and plan each next review in the Review Calendar.

What's in the template

What "the policy exists" and "the policy is current" look like as two different columnsThe Policy Register's two dates, the Annual Disclosure Tracker's three-part test, and the Review Calendar sorted by days overdue.
Nonprofit Policies Required Template
RiverPolicy Register

Policy Register

Illustrative, for a fictional community health nonprofit called Cedar Line Community Health. Fiscal year ending 31 December 2026, register run 1 May 2026, two weeks ahead of the 14 May board meeting.

PolicyAnswersAdoptedReviewedCycleDays overdue
Conflict of InterestPart VI, 12a & 12b12 Sep 201915 Jan 20261 year0
WhistleblowerPart VI, 1312 Sep 201918 Jan 20222 years834
Document Retention and DestructionPart VI, 1412 Sep 201918 Jan 20222 years834
Gift AcceptanceSchedule M, 3112 Sep 2019never3 years1,327
4 policiesanswer every line Yes2 at 834, 1 at 1,327

Every one of these four rows answers its Form 990 or Schedule M line Yes, honestly, because the line only asks whether the policy exists as of year end. The right column is the fact the return never sees: two policies are 834 days past the review the board itself scheduled, and Gift Acceptance has never been reviewed since the day it was adopted and is 1,327 days overdue.

RiverAnnual Disclosure Tracker

Annual Disclosure Tracker

Line 12b's population, scored against real pay rather than a title or a carried-forward list. Disclosure round run 15 Jan 2026.

Covered personCompensation$150k TestResp. TestTop 20Key employeeDays undisclosed
Executive Directorofficern/an/an/aalways covered0
9 sitting directorsdirectorsn/an/an/aalways covered0, 9 of 9 signed
Dir. of Community Health Screenings$152,400Pass13.76%, passPassYes, 1 Jan 2026106
Dir. of Nutrition Counseling$118,000Fail19.22%, passnot reachedNon/a
Dir. of Development$96,800Fail6.55%, failnot reachedNon/a
11 covered1 undisclosed106 days

Two directors fail on two different tests, which is the point of running all three rather than one: passing the Responsibility Test alone, at 19.22% or even higher, proves nothing without the $150,000 Test beside it. The Community Health Screenings director passes all three, and her raise took effect fourteen days before the round that should have asked her.

RiverReview Calendar

Review Calendar

Sorted by days overdue, most overdue first, with the live trigger since the last review carried separately from the calendar date.

PolicyLast reviewedNext dueDays overdueLive trigger since
Gift Acceptancenever since adoption12 Sep 20221,3271 gift, $61,000, 22 Apr 2026. No review opened
Whistleblower18 Jan 202218 Jan 2024834none recorded
Document Retention and Destruction18 Jan 202218 Jan 20248342 grant types added, never checked
Conflict of Interest15 Jan 202615 Jan 202701 new key employee since this review

Current by date and still missing a fact is what the bottom row shows: the conflict of interest review closed with nothing overdue and one new key employee undisclosed anyway. Overdue by date and untested against the one gift that mattered is the top row, and it is the larger gap of the two.

  • How the 990 Answer-key Register WorksThe three checks behind the register: is each policy current, who must disclose, and were gifts reviewed.
  • Conflict of Interest PolicyCovers directors, officers and key employees, with Form 990's three key employee tests and the recusal procedure.
  • Whistleblower PolicyWhat can be reported and to whom, protection from retaliation, and how reports are investigated.
  • Document Retention and Destruction PolicyA retention schedule by record type, a legal hold that pauses destruction, and a logged destruction process.
  • Gift Acceptance PolicyWhich gifts need review before you accept them, including nonstandard contributions, and the steps for deciding.
  • Adoption NoteA narrative for the board on each policy's adoption, review status and any gap, with dates.
  • Policy Register sheetEach policy's Form 990 line, adoption date, last review, review cycle, next due date and days overdue.
  • Annual Disclosure Tracker sheetEveryone who must disclose, with each employee scored on the three key employee tests and signature status.
  • Review Calendar sheetReviews sorted by days overdue, with any event since the last review that calls for one sooner.

Common questions

What policies does a nonprofit need?

Most US nonprofits that file Form 990 should adopt four: conflict of interest, whistleblower, document retention and destruction, and gift acceptance. Form 990 asks about the first three in Part VI, and Schedule M asks about the fourth. Add any policy your state requires, and a documented process for setting your executive's pay.

Are nonprofits required to have these policies?

Generally not under federal tax law. The IRS asks about them on Form 990 and believes they tend to improve tax compliance, but the tax code doesn't demand them. Some states do. New York nonprofit corporations need a conflict of interest policy, plus a whistleblower policy once they have 20 or more employees and over $1 million in prior-year revenue.

Who has to sign a conflict of interest disclosure?

Officers, directors, trustees and key employees, the group Form 990 line 12b names. Your executive director and top finance person count as officers whatever their titles. A key employee is a staff member paid over $150,000 who has officer-level influence or manages a part of the organization worth 10% or more of the whole. Only the 20 highest paid who meet both tests count.

How often should a nonprofit review its policies?

Review the conflict of interest policy every year, when the disclosures come in, and the other three every two or three years. Form 990 never asks about reviews, so have the board set a cycle for each policy and record every review in the minutes. A first gift of real estate or a whistleblower report is a reason to review sooner.

Does a small nonprofit need these policies?

Federal tax law generally doesn't require them, and Forms 990-EZ and 990-N don't ask about them, though your state may require one. Form 990-EZ is an option with gross receipts under $200,000 and assets under $500,000. Adopt them anyway: they take one board vote, help when a conflict or complaint comes up, and are ready when you grow into Form 990.

Is this nonprofit policy template free?

Yes. Download the six Word documents and three CSV sheets with no signup. The sheets and the Adoption Note use a made-up community health nonprofit, so you can see how they work before you clear them. Edit with AI opens the same template in a free River workspace.

What does Edit with AI do?

It opens the template in River and asks for your policies, the minutes behind them and your staff roster with real pay. River records when each policy was adopted and last reviewed, tests who must disclose and looks for gifts that skipped review, then revises the documents. It won't backdate anything to close a gap, and it doesn't decide whether a deal is a conflict.

Sources

  1. IRS. “Instructions for Form 990 Return of Organization Exempt From Income Tax (2025).” irs.gov (opens in a new tab)

  2. IRS. “2025 Schedule M (Form 990).” irs.gov (opens in a new tab)

  3. New York State Senate. “Section 715-A: Conflict of interest policy.” nysenate.gov (opens in a new tab)

  4. New York State Senate. “Section 715-B: Whistleblower policy.” nysenate.gov (opens in a new tab)

  5. IRS. “Instructions for Form 1023 (12/2024).” irs.gov (opens in a new tab)

  6. eCFR. “2 CFR 200.334 — Record retention requirements.” ecfr.gov (opens in a new tab)

  7. IRS. “Form 8282 (Rev. October 2021).” irs.gov (opens in a new tab)

Written by

Chandler Supple

Co-founder & CEO, River

Chandler has spent the last six years working in AI, building tools for millions of users and Fortune 100 companies. In 2025, he co-founded River to build a new kind of operating system for AI agents.

Reviewed by

Brian Joseff, Co-founder, River