Published on
February 19, 2026
NGO Websites Are Governance Problems Not Design Problems

After building 100+ websites with specialisation in nonprofits, I've noticed something consistently misunderstood: Communications Directors approach their website as a design problem when it's actually a governance infrastructure challenge. The difference isn't semantic—it fundamentally changes who needs to be involved, what decisions matter, and where resources should go.
When your Board asks about the website, they're not asking about aesthetics. They're asking about institutional risk, stakeholder accountability, and regulatory compliance. The sooner you frame it this way, the easier every subsequent decision becomes.
The Symptom: Design Paralysis Hiding Governance Confusion
I regularly speak with Communications Directors who've been stuck in website revision cycles for 18+ months. They've run stakeholder surveys, tested colour palettes, debated homepage layouts, and still can't get Board approval. The conversation typically sounds like this:
"We know the website needs work, but we can't get everyone to agree on the direction. The CEO wants impact stories front and centre. The Fundraising Director is pushing for donor prominence. The Programmes team insists beneficiaries should come first. Meanwhile, the Board keeps asking if we're sure this is the right investment."
This isn't design paralysis. It's governance confusion masquerading as aesthetic debate.
The real question isn't "What should the homepage look like?" It's "How does this institution navigate competing stakeholder claims whilst maintaining regulatory compliance and fiduciary responsibility?"
That's a Board-level question, not a designer's remit.
Why Design Frameworks Fail Nonprofit Institutions
Commercial web design operates on a relatively simple premise: identify your primary customer, optimise their journey, measure conversion. The stakeholder landscape is intentionally simplified because clarity drives revenue.
Nonprofits don't have this luxury. You're managing:
- Beneficiaries who deserve dignity and accurate representation but rarely visit your website
- Donors who provide resources but aren't your primary purpose
- Regulators who require compliance whether you prioritise it or not
- The Board who hold fiduciary duties regardless of their digital literacy
- Staff who need tools that actually work for their daily operations
When a commercial designer applies customer-journey thinking to this complexity, they inevitably ask: "Who's your primary audience?" And you're forced into a false choice that violates someone's legitimate claim on institutional attention.
I've seen this play out dozens of times. The organisation picks "donors" as primary audience, builds accordingly, then faces internal backlash about beneficiary exploitation. Or they choose "beneficiaries," create something mission-pure but fundraising-incompetent, then can't sustain operations.
The framework itself is wrong. You don't need better customer journey mapping. You need governance infrastructure that acknowledges multiple legitimate stakeholders without forcing false hierarchies.
The Actual Problem: Multi-Stakeholder Navigation Under Institutional Scrutiny
Through my nonprofit work, I've observed that organisations with £2-5 million revenue operate in a fundamentally different context from startups or commercial entities. You face:
Board-Level Oversight: Trustees hold legal fiduciary duties. Website investments over £15k-£20k typically require Board approval. They're asking governance questions: "How does this serve our charitable purpose? What's the compliance risk? How do we demonstrate responsible stewardship of charitable funds?"
Regulatory Requirements: Charity Commission guidance on public benefit, beneficiary safeguarding, financial transparency. WCAG AA compliance isn't just legal cover—it's evidence of values alignment. Data protection obligations that extend beyond GDPR basics.
Stakeholder Complexity: You're accountable to people who never meet each other and have competing legitimate interests. Your website is where these claims collide publicly.
Institutional Memory: Leadership transitions every 3-5 years. The website often outlasts the people who commissioned it. Governance infrastructure needs to survive personnel changes.
None of this appears in standard design thinking frameworks. Yet it determines whether your website project succeeds or generates institutional liability.
What Governance Infrastructure Actually Means
When I talk about websites as governance infrastructure, I'm describing systems that:
Document institutional accountability: Your website is evidence of how you navigate stakeholder claims. Annual reports, beneficiary safeguarding policies, accessibility statements, data protection commitments—these aren't marketing copy. They're governance documentation proving you take institutional duties seriously.
Enable regulatory compliance: Charity Commission requirements aren't suggestions. Public benefit demonstration, financial transparency, beneficiary protection—your website is where you prove compliance or create risk.
Support Board oversight: Trustees can't govern what they can't see. The website should make institutional commitments visible and measurable. If your Board can't easily verify whether you're meeting accessibility obligations or safeguarding policies, you've created governance opacity.
Survive personnel transitions: Communications Directors change jobs. Donors shift focus. The website infrastructure needs to maintain institutional consistency regardless of who's currently employed.
This is fundamentally different from "create compelling donor journeys" or "showcase impact stories." Those might be outputs, but they're not the foundation.
The Three-Stakeholder Framework
After 7+ years specialising in nonprofits, I've learned to focus governance attention on three stakeholders rather than trying to serve seven equally:
1. Beneficiaries (Charitable Purpose)Your legal reason for existence. The website must represent them with dignity, protect their privacy, demonstrate safeguarding protocols. This isn't negotiable—it's regulatory requirement and ethical baseline.
2. Institutional Oversight (Board/Regulators)Trustees need governance infrastructure. Regulators need compliance evidence. Your website provides both or creates liability.
3. Resource Providers (Donors/Funders)Necessary for sustainability, but subordinate to charitable purpose. They need transparency and impact evidence, not primacy.
This framework acknowledges that stakeholders have different levels of claim on institutional attention. Beneficiaries and regulators have legal priority. Donors have necessary but secondary claims. When these conflict, you have a governance hierarchy for decision-making, not aesthetic paralysis.
What This Looks Like In Practice
I recently completed a Blueprint Audit for an international development organisation stuck in 24-month revision paralysis. The Communications Director had three different agencies proposing three different "primary audience" approaches. The Board kept deferring approval because none of the proposals addressed their actual concerns.
The governance questions were:
- How do we demonstrate safeguarding protocols for youth programming across multiple countries?
- What's our liability if donor materials create harmful beneficiary narratives?
- How do we prove WCAG compliance to funders requiring accessibility standards?
- Can trustees actually verify whether we're meeting Charity Commission transparency obligations?
None of the agency proposals mentioned these. They were selling customer journeys and conversion optimisation.
We reframed the project around governance infrastructure:
- Beneficiary safeguarding as architectural requirement, not policy footnote
- WCAG AA as institutional values evidence, not legal checkbox
- Charity Commission compliance as Board risk mitigation
- Multi-stakeholder navigation as governance framework, not design paralysis
The Board approved funding in one meeting. Not because we had better mockups, but because we addressed their actual fiduciary concerns.
Why This Matters for Your Budget Conversation
When you frame the website as governance infrastructure rather than design project, the budget conversation shifts entirely.
Design projects compete with other marketing expenses: events, campaigns, materials. They're discretionary spending evaluated on ROI. Trustees naturally question whether £25,000 for a website redesign is responsible stewardship when programming needs funding.
Governance infrastructure competes with insurance, compliance audits, risk mitigation. It's institutional necessity evaluated on liability reduction. The question becomes: "What's the cost of regulatory non-compliance, stakeholder confusion, or Board opacity?" Suddenly £25,000 for proper infrastructure looks like prudent risk management.
I've seen this shift unlock budgets that were impossible under design framing. One organisation increased website investment from significantly more after reframing it as governance infrastructure addressing Charity Commission concerns and Board oversight requirements. Same scope, different context, approved in one meeting.
The Questions That Reveal Governance Gaps
When I conduct Blueprint Audits, these questions consistently expose whether organisations understand governance requirements:
To the Board:
- "How do you currently verify the organisation meets WCAG accessibility obligations?"
- "What evidence would you need to demonstrate responsible stewardship of the website investment?"
- "How would you know if the website creates beneficiary safeguarding risks?"
To the Communications Director:
- "Which stakeholder claims conflict most often, and how do you navigate that?"
- "What would make the Board confident in website governance rather than anxious about expense?"
- "How does the website support compliance requirements versus creating liability?"
To the Executive Director:
- "How does the website survive your eventual departure and next leadership transition?"
- "What institutional commitments need to remain consistent regardless of personnel changes?"
- "How do funders verify your governance quality through digital presence?"
If these questions feel uncomfortable or unanswerable, you've identified governance gaps that design thinking won't solve.
Moving Forward: Governance First, Design Second
The practical implication is simple: before you talk to designers about aesthetics, you need governance clarity about institutional requirements.
This means:
Board Engagement: Trustees need to articulate their fiduciary concerns and compliance requirements before any design brief is written. If your Board hasn't defined governance expectations, you're designing in institutional vacuum.
Stakeholder Hierarchy: You need explicit framework for navigating competing claims. Not consensus (impossible), but legitimate decision-making structure the Board endorses.
Compliance Baseline: WCAG AA, Charity Commission guidance, beneficiary safeguarding, data protection—these aren't optional add-ons. They're architectural requirements that inform every subsequent decision.
Institutional Consistency: What needs to survive leadership transitions? What represents non-negotiable organisational commitments? This defines your governance foundation.
Only after these are clear do aesthetic decisions make sense. And at that point, design becomes implementation of governance infrastructure rather than speculative creative exercise.
Why I Offer Blueprint Audits Before Implementation
This is precisely why I don't offer implementation services without the Blueprint Audit first. I can't build appropriate governance infrastructure without understanding your institutional requirements, stakeholder complexity, and compliance context.
The Blueprint Audit process involves:
- Board-level interviews clarifying fiduciary concerns and governance expectations
- Stakeholder salience mapping identifying legitimate claims and navigation framework
- Compliance gap analysis covering Charity Commission, WCAG, safeguarding
- Governance infrastructure recommendations addressing institutional requirements
- Implementation approach that maintains appropriate oversight
It's £2,500 for governance clarity before any implementation commitment. Many organisations use it purely for Board due diligence without proceeding to implementation—and that's entirely appropriate. The governance thinking has value regardless of whether I'm involved in delivery.
But when implementation does proceed, it's building governance infrastructure the Board has endorsed, with compliance requirements mapped, and stakeholder navigation framework established. That's fundamentally different from asking designers to solve institutional complexity through aesthetic choices.
The Core Insight
Your nonprofit website isn't a design problem. It's governance infrastructure requiring Board oversight, regulatory compliance, stakeholder navigation, and institutional consistency.
The sooner you frame it this way, the easier every decision becomes. Not because governance is simple, but because you're finally addressing the actual challenge rather than treating symptoms with design thinking.
If your Board is anxious about website investment, they're probably asking governance questions whilst receiving design answers. Close that gap first. Everything else follows.
Ready to address governance infrastructure rather than design paralysis? The Blueprint Audit provides Board-level clarity on compliance requirements, stakeholder navigation, and institutional risk before any implementation commitment. £2,500 for governance due diligence that often unlocks decisions that have been stalled for months.
Further reading:
- Governance-first design frameworks
- Board governance questions
- Charity commission compliance
- Ngo credibility audit
What Treating the Website as a Governance Problem Produces
The shift from "website as communications tool" to "website as governance infrastructure" is visible in how leadership talks about the site. It stops being the comms team's problem and becomes a board-level concern. Investment decisions get made against a governance framework rather than a budget guess. The site is audited, maintained, and reviewed on a schedule — not only when something breaks or a funder asks an uncomfortable question.
Organisations that make this shift describe their website as something they're proud to direct people toward rather than something they apologise for. That's not a design outcome. It's a governance outcome.
Q1: What does it mean to treat an NGO website as a governance problem?
It means recognising that website failures are not technical or communications problems — they are governance failures. When content goes outdated, when credentials are held by individuals rather than the organisation, when accessibility compliance deteriorates, when content ownership is unclear — these are failures of accountability structure and decision framework, not failures of design or technology. Solving them requires governance interventions: documented frameworks, board awareness, defined roles, and oversight processes.
Q2: Why do most NGOs treat their website as a communications tool rather than governance infrastructure?
Because the website is most visibly managed by the communications team, who naturally focus on content and design — the outputs — rather than the governance framework that should determine what gets published, by whom, and how. The board and leadership rarely consider the website beyond whether it looks professional, which means governance oversight is absent from the decisions that most affect the site's long-term institutional usefulness.
Q3: What governance responsibilities does an NGO board have for the website?
The board is responsible for ensuring the website: meets the organisation's legal obligations (accessibility, data protection, charity regulation), accurately represents governance and financial position, is owned by the organisation rather than dependent on individuals or vendors, and has a documented governance framework for content and management decisions. These are fiduciary responsibilities, not communications preferences — the board cannot discharge them by simply delegating to the communications team without oversight.
Q4: What is content governance in the context of NGO websites?
Content governance defines who can publish what, who approves content before publication, how often each content type is reviewed, what happens when content becomes outdated, and how the organisation maintains compliance across all pages. Without content governance, the site accumulates outdated information, inconsistent presentation, and compliance gaps — not because staff are negligent, but because there is no system holding anyone accountable for specific content areas. Governance is the system; management is the activity the system governs.
Q5: What governance documentation should every NGO website have?
At minimum: a content ownership matrix showing who is responsible for each section, a publishing and approval workflow, a credentials register with all platform access details, a compliance checklist covering regulatory requirements and how they are maintained, and a review schedule specifying when each content type is reviewed and by whom. This documentation is the governance framework. Without it, all decisions are ad hoc — which means quality depends entirely on the current team's individual judgment and institutional memory.
Q6: How does website governance differ from website management?
Management is the day-to-day activity of publishing content, maintaining the platform, and responding to technical issues. Governance is the framework of policies, roles, accountability structures, and oversight processes that determines how management decisions are made. You can have management without governance — someone is maintaining the site but with no framework guiding their decisions. Governance without management is also possible — policies exist but aren't being followed. Effective websites require both working together.
Q7: How should NGO website governance be reported to the board?
Website governance should appear in board reporting at least annually, ideally as part of operational risk review. The report should cover: compliance status against WCAG and GDPR requirements, content currency including when key governance sections were last reviewed, vendor risk including credential ownership and contract status, and any significant incidents or identified risks. Most boards have never received a website governance report; introducing one typically surfaces risks the board didn't know existed.
Q8: What is the first step in establishing NGO website governance?
Conduct a governance audit — not of the website's design or content, but of the decision-making infrastructure around it. This answers: who currently makes website decisions and on what basis, what documentation exists, who holds credentials and access, what vendor relationships exist and on what terms, what compliance requirements apply and how they are currently being met. The audit findings become the baseline from which a proper governance framework is built.
Q9: What is the relationship between website governance and NGO credibility?
The website is the most public expression of an NGO's governance. A site with outdated trustee listings, inaccessible content, missing financial information, or broken functionality signals inadequate governance to every external stakeholder — regardless of how well-governed the organisation actually is internally. Conversely, a site with current governance information, accessible design, transparent financials, and accurate programme descriptions signals a well-run organisation before any conversation begins.
Q10: How do leadership transitions expose NGO website governance failures?
Transitions reveal governance failures that were invisible during stable periods. When an outgoing leader takes their institutional knowledge about the website — why decisions were made, who manages what, where credentials are — the gaps in documented governance become immediately apparent. The most common transition-related failures are credentials held by individuals rather than the organisation, content maintained by departed staff, and vendor relationships that exist informally rather than contractually. These are governance failures, not personnel failures.
Eric Phung has 7 years of Webflow development experience, having built 100+ websites across industries including SaaS, e-commerce, professional services, and nonprofits. He specialises in nonprofit website migrations using the Lumos accessibility framework (v2.2.0+) with a focus on editorial independence and WCAG AA compliance. Current clients include WHO Foundation, Do Good Daniels Family Foundation, and Territorio de Zaguates. Based in Manchester, UK, Eric focuses exclusively on helping established nonprofits migrate from WordPress and Wix to maintainable Webflow infrastructure.

In case you missed it
Explore more

Cookie Consent for Nonprofit Websites | GDPR Guide
GDPR requires cookie consent on any site collecting analytics, ads, or user data. Here's how to choose a consent platform, implement Google Consent Mode V2, and stay compliant.

Nonprofit Website Vendor Risk Audit | Ops Director Guide
Your website depends on vendors you may not have reviewed in years. Here's the annual audit operations directors should run on their nonprofit web infrastructure.

Nonprofit Website Handover Planning | Ops Director Guide
Before committing to a nonprofit website rebuild, operations directors need a clear handover plan. Here's what to demand from your current provider before contracts are signed.
Join our newsletter
Subscribe to my newsletter to receive latest news & updates
