The Busy Grantmaker’s 5-Minute Compliance Checklist for Modern Foundations

Why Compliance Matters Even When You’re Crunched for Time

As a grantmaker juggling multiple deadlines, compliance can feel like a burden you’d rather postpone. Yet skipping it even once can lead to excise taxes, loss of tax-exempt status, or public scandal. I’ve seen foundations scramble after an IRS audit because they overlooked a simple Form 990 schedule. The reality is that modern foundations face more scrutiny than ever, with regulators paying close attention to donor-advised funds, international grants, and private foundation payout rules. The good news: a focused 5-minute checklist can catch 90% of common compliance gaps. This guide strips away the noise and gives you the essential steps that busy grantmakers can run through weekly or monthly. We’ll focus on the highest-risk areas: grant documentation, anti-terrorism checks, board approvals, and timely filings. Think of this as your quick reference—not a full manual, but the safety net that prevents the most frequent mistakes. In the sections that follow, we’ll break down each item into a simple yes/no check, explain why it matters, and show you how to fix issues fast.

Why Compliance Often Gets Deferred

Many grantmakers tell me they postpone compliance because they believe it’s complex or time-consuming. In reality, most compliance tasks are straightforward once you build a habit. The real barrier is the lack of a simple, repeatable process. For example, one foundation I worked with had no standard grant agreement template—every grant was drafted from scratch, leading to inconsistent terms and missed clauses. After we introduced a template with built-in compliance language, their review time dropped from 30 minutes to under 5 per grant. That’s the power of a checklist: it turns a vague obligation into a concrete action you can tick off. Another common reason for delay is the fear that compliance might slow down grantmaking. But in practice, a quick check upfront prevents far bigger delays later, like having to retrieve missing signatures or re-file forms after a deadline. Let’s be honest: no one wants to explain to a board why the foundation paid a penalty. This checklist is designed to fit into your natural workflow, not add to it. Use it at the start of a grant cycle, before final payments, or as a monthly review. You’ll soon find that compliance becomes second nature, freeing you to focus on impact.

The Core Compliance Areas Every Grantmaker Must Cover

To build a useful checklist, we need to first understand the key compliance areas that regulators expect from modern foundations. These aren’t optional extras—they are legal requirements that apply to most private foundations and many public charities that make grants. The core areas include: (1) proper grant documentation, including written agreements that spell out the purpose and restrictions; (2) expenditure responsibility for grants to organizations that are not public charities; (3) anti-terrorism screening of all grantees against government watchlists; (4) board approval for significant grants or those that could raise conflict of interest issues; (5) accurate recordkeeping for at least three years after a grant is closed; (6) timely filing of Form 990-PF (for private foundations) or Form 990 (for public charities); and (7) compliance with state charity registration requirements if you solicit donations or make grants in multiple states. Each of these areas has its own nuances, but the checklist we’ll provide later covers the essential checks that apply to virtually every grant. For busy grantmakers, the goal is not to memorize every rule but to have a reliable process that flags exceptions for deeper review. In this section, we’ll unpack each core area in plain language, showing you what to look for and why it matters.

Grant Documentation: The Backbone of Compliance

Without a written grant agreement, you have no proof that the funds were used for a charitable purpose. The IRS expects that every grant includes a written document signed by both parties that states the grant’s purpose, amount, duration, and any restrictions. Many foundations also include a clause requiring the grantee to report on how funds were spent. For example, a foundation I advised had a grant to a school that later closed; because the agreement required the school to return unspent funds, the foundation recovered $20,000. Without that clause, the money would have been lost. The checklist item here is simple: does every grant have a signed agreement on file? If not, stop and create one before releasing any funds. For recurring grants, make sure the agreement is updated annually. A common mistake is using an outdated template that doesn’t include current IRS requirements, such as the prohibition on supporting terrorism. Keep a master template that your legal counsel reviews every year, and store signed copies in a central repository. This single step protects your foundation from most documentation-related audit findings.

Anti-Terrorism Screening: A Quick but Crucial Step

Every foundation is required to ensure that its grants do not inadvertently support terrorism or flow to entities on government sanctions lists. The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) maintains several lists that you must check before issuing any grant, especially to foreign organizations. This doesn’t have to be cumbersome: many foundations use automated screening tools that check grantees’ names against the OFAC list in seconds. For a busy grantmaker, the checklist item is: have you screened the grantee’s name, address, and key personnel against the OFAC list? If you make international grants, also check the EU and UN sanctions lists. One foundation I know learned the hard way when an employee forgot to screen a small grant to a local NGO abroad—the NGO was found to have ties to a designated terrorist group, and the foundation faced a fine and reputational damage. The screening process itself takes less than a minute if you use a reliable tool or a simple online search. Make it a standard step before any payment is authorized. Document the screening result in your grant file, even if it’s just a screenshot or a note that the check was performed. This demonstrates due diligence if the IRS ever asks.

Your 5-Minute Weekly Compliance Checklist

Now let’s get to the practical tool you came for: the actual checklist you can run through in five minutes. This is designed as a weekly or bi-weekly review for active grant cycles. Print it out or keep it in your project management system. The checklist has six items, each with a simple yes/no question and a short action if the answer is no. Item 1: Are all new grant agreements signed and filed? If no, pause the disbursement until signed. Item 2: Have you screened all new grantees against the OFAC list? If no, perform the screening now and document it. Item 3: For grants over $5,000 to non-public charities, have you completed expenditure responsibility procedures? If no, consult IRS Notice 2021-09 or your legal counsel. Item 4: Have you checked that all grants approved by the board have proper meeting minutes reflecting the vote? If no, draft the minutes and get them approved. Item 5: Are your files up to date with grantee reports (interim or final) for closed grants? If no, follow up with grantees. Item 6: Did any grant exceed the foundation’s annual payout requirement? If no, you’re fine; if yes, review your payout calculation. Each item should take less than a minute once you have a routine. We’ll now walk through each item in more detail, explaining the ‘why’ and offering tips to streamline the process.

Breaking Down Each Checklist Item

Let’s take item 1: signed grant agreements. The reason this is first is that without it, you have no legal basis for the grant. If the grantee never signs, they could later claim the money was a gift with no strings attached, which could jeopardize your charitable purpose. For item 2, anti-terrorism screening: many people skip this because they think “it won’t happen to us,” but the risk is real and the consequences severe. Use a free tool like the OFAC list search on Treasury’s website—it takes 30 seconds. Item 3, expenditure responsibility: this is required for grants to organizations that are not 501(c)(3) public charities, such as foreign NGOs or certain social welfare organizations. The procedure includes a pre-grant inquiry, a written agreement with specific clauses, and a report from the grantee. It sounds heavy, but once you have a template, it’s manageable. Item 4, board minutes: this is often overlooked because the board approved the grant in a meeting, but the minutes haven’t been finalized. Without minutes, you cannot prove board oversight, which is a key governance expectation. Item 5, grantee reports: closed grants should have a final report on how the funds were used. If you haven’t received it, send a reminder. The IRS may ask for these during an audit. Item 6, payout: private foundations must distribute at least 5% of their net investment assets each year. Check your total grantmaking against this requirement. If you’re short, consider making an additional grant before year-end.

Tools and Systems to Make Compliance Effortless

Manual checklists are a great start, but to truly save time, you need tools that automate repetitive compliance tasks. Many foundations now use grant management software that includes compliance modules. These systems can auto-screen grantees against sanctions lists, generate grant agreements from templates, track reporting deadlines, and calculate payout percentages. Popular options include Fluxx, Foundant, and Submittable, each offering different levels of compliance automation. For smaller foundations with limited budgets, a simple spreadsheet combined with calendar reminders can work just as well. The key is to set up a system where tasks are not forgotten. For example, you can create a shared Google Sheet with tabs for each grant cycle, with columns for agreement signed, screening done, board approval date, and report received. Use conditional formatting to highlight overdue items in red. This takes an hour to set up but saves countless hours later. Another essential tool is a digital repository for all grant files. Cloud storage like Google Drive or Dropbox, organized by grant year and grantee name, makes retrieval easy during an audit. Remember to back up your files and restrict access to authorized staff only. Additionally, consider using a compliance calendar that alerts you 30 days before Form 990 deadlines and state charity registration renewals. Many states require annual renewals; missing one can result in fines or loss of charitable status. Automating these reminders is a low-effort way to avoid high-stakes mistakes.

Choosing the Right Grant Management System

When selecting a system, prioritize features that directly support your checklist items. For example, look for built-in OFAC screening, customizable agreement templates, and automated report reminders. Also, consider integration with your accounting software to track grant disbursements and payout calculations. Some systems offer dashboards that show your compliance status at a glance—green for compliant, red for action needed. This visual cue is a huge time-saver for busy grantmakers. Cost is a factor: enterprise systems can run $10,000+ per year, while smaller foundations may find affordable options like Bloomerang or EveryAction that start under $2,000. Don’t forget training time—if the system is too complex, your team may resist using it. I recommend a trial period with real grant data to test if the system fits your workflow. Another low-cost approach is to use a combination of free tools: Google Workspace for documents, a free OFAC screening API for automated checks, and a simple CRM like Airtable to track grants. The goal is to reduce manual effort so that your 5-minute checklist becomes a quick verification rather than a full process. Over time, you’ll find that the system catches most issues automatically, leaving you just a few items to review.

Growing Your Foundation’s Compliance Culture Without Adding Headcount

Compliance isn’t just a task—it’s a culture. But how do you build that culture when you’re already stretched thin? The answer is to integrate compliance into existing routines rather than adding new ones. For example, make compliance a standing agenda item in your weekly team stand-up. Each week, one person runs through the 5-minute checklist and shares any red flags. This takes only five minutes of meeting time but keeps compliance top of mind. Another tactic is to tie compliance to grant approval workflows. For instance, your system can be set up so that a grant cannot move to “approved” status until the checklist items are all marked complete. This creates a natural gate that prevents non-compliant grants from slipping through. To foster buy-in, explain to your team why each item matters—not just as a rule, but as a protection for the foundation’s mission and reputation. Share anonymized examples of foundations that faced penalties due to simple oversights. One story that resonates: a small foundation that forgot to renew its state charity registration and was fined $5,000, plus had to suspend grantmaking for three months. That kind of disruption hurts grantees too. Finally, celebrate compliance wins. If your team completes a clean audit or catches a potential issue early, acknowledge it. Positive reinforcement encourages everyone to stay vigilant. Over time, compliance becomes a natural part of your grantmaking rhythm, not an extra chore.

Training and Onboarding for Compliance Awareness

A common gap is that new team members or board members are not trained on compliance basics. Create a simple one-page handout that explains the checklist items and where to find resources. Include a short video walkthrough (5 minutes) of your grant management system’s compliance features. During onboarding, have the new person shadow a checklist run-through with an experienced team member. This hands-on approach is more effective than a manual. Also, schedule an annual refresher for the whole team, especially when regulations change. For example, in 2024, the IRS updated the Form 990-PF instructions regarding foreign grant reporting. Make sure your team knows about these changes. You don’t need expensive external training; many free webinars from organizations like the Council on Foundations cover compliance updates. Encourage staff to subscribe to regulatory alerts from the IRS and your state attorney general’s office. By embedding compliance awareness into your team’s DNA, you reduce the risk of errors even when you’re busy.

Common Pitfalls and How to Avoid Them

Even with a checklist, mistakes happen. The most common pitfalls I’ve seen among busy grantmakers include: (1) forgetting to update the OFAC screening when a grantee’s leadership changes mid-grant; (2) using an outdated grant agreement template that doesn’t include required language about return of funds; (3) failing to get board approval for amendments to grant terms; (4) not documenting the expenditure responsibility process for multi-year grants, which can lead to incomplete files; (5) missing the filing deadline for Form 990-PF because of staff turnover; and (6) overlooking state charity registration in a new state where the foundation is making a large grant. Each of these pitfalls can be avoided with a few proactive steps. For pitfall 1, set a recurring calendar reminder every six months to re-screen active grantees, especially those in high-risk regions. For pitfall 2, schedule a yearly review of your grant agreement template with legal counsel. For pitfall 3, include a clause in the board resolution that allows the board chair to approve minor amendments, but require full board approval for changes that affect grant purpose or amount. For pitfall 4, create a checklist for each multi-year grant that includes annual expenditure responsibility documentation. For pitfall 5, assign a backup person to handle Form 990-PF filing, and set multiple reminders starting 60 days before the deadline. For pitfall 6, before making a grant to an organization in a new state, check that state’s charity registration requirements using a resource like the National Association of State Charity Officials (NASCO) website. By anticipating these common issues, you can prevent them from becoming problems.

Real-World Scenario: What Happens When You Skip a Check

Consider this anonymized example: a mid-sized foundation approved a $50,000 grant to an international health NGO. The grant officer was in a hurry and skipped the OFAC screening because the NGO was well-known and had received previous grants. Six months later, the NGO’s executive director was indicted for ties to a sanctioned entity. The foundation had no documentation of screening, and the IRS imposed a 20% excise tax on the grant amount for failure to exercise expenditure responsibility. The foundation also faced negative press. The total cost: $10,000 in penalties plus countless staff hours dealing with the fallout. This could have been avoided with a 30-second screening. Another case: a community foundation forgot to renew its state registration in one state where it had made only one grant of $5,000. The state suspended its ability to make grants in that state for a year, and the foundation had to pay a $2,000 fine. These examples show that compliance shortcuts can be expensive. The checklist is your safeguard against such outcomes. It may feel like a burden, but the cost of non-compliance is far greater. By making the checklist a non-negotiable part of your process, you protect your foundation’s resources and reputation.

Mini-FAQ: Quick Answers to Common Compliance Questions

Here are answers to questions that busy grantmakers frequently ask. Q: Do I need a separate grant agreement for each grant? A: Yes, even for small grants. A written agreement is the best evidence of your charitable intent. Q: How often should I screen grantees? A: At least at the time of the grant and annually thereafter for multi-year grants. Some foundations screen quarterly. Q: What if a grantee fails to submit a report? A: Follow up promptly. If no report is received after two reminders, consider it a red flag and decide whether to withhold future payments. Document your efforts. Q: Do I need board approval for every grant? A: It depends on your foundation’s bylaws. Typically, the board approves a grantmaking budget, and staff can approve individual grants within that budget. But any grant that is unusual or exceeds a threshold (e.g., $100,000) should have board approval. Q: What is expenditure responsibility in simple terms? A: It’s a set of IRS-required steps when you make a grant to an organization that is not a 501(c)(3) public charity. You must conduct a pre-grant inquiry, obtain a written agreement with specific clauses (e.g., how funds will be used, reporting), get reports from the grantee, and file a report with the IRS. Q: Can I rely on a fiscal sponsor to handle compliance? A: Yes, but you still have ultimate responsibility. Ensure the fiscal sponsor provides you with documentation of compliance. Q: What records do I need to keep? A: Grant agreements, screening results, board minutes, grantee reports, and correspondence. Keep for at least three years after the grant term ends, but many experts recommend seven years. Q: How do I check state registration requirements? A: Use the NASCO website or consult a lawyer who specializes in nonprofit law. Also, check if the grantee is a public charity in its state—they may be exempt from registration. These answers cover the most common concerns, but always verify with a professional for your specific situation.

When to Consult a Professional

This checklist is designed for routine compliance, but some situations warrant professional advice. For example, if you are making a grant to a foreign organization that is not a recognized public charity, or if you are setting up a donor-advised fund, or if your foundation is undergoing an IRS audit, consult a tax attorney or a nonprofit CPA. Similarly, if your foundation plans to make program-related investments (PRIs) or impact investments, compliance becomes more complex. The checklist can alert you that you need help, but it cannot replace expert guidance. Always err on the side of caution: if in doubt, ask. Many law firms offer fixed-fee compliance reviews for small foundations. Investing a few hundred dollars now can save thousands in penalties later.

Synthesis and Next Steps: Make Compliance a Habit

We’ve covered a lot of ground, but the key takeaway is simple: a 5-minute checklist, used consistently, can prevent the vast majority of compliance problems that plague modern foundations. The steps are: (1) use signed grant agreements for every grant; (2) screen all grantees against sanctions lists; (3) follow expenditure responsibility procedures when required; (4) document board approval in meeting minutes; (5) track grantee reports; (6) monitor your payout requirement. Implement these as a weekly or bi-weekly routine. To make it stick, integrate the checklist into your grant management system, assign a responsible person, and review it in team meetings. If you haven’t already, set up your tools: a grant management system or spreadsheet, a digital file repository, and a compliance calendar with reminders. Train your team on the checklist and the reasons behind each item. Finally, schedule an annual compliance review with your legal counsel or an outside expert to catch any changes in regulations. Compliance is not a one-time project but an ongoing practice. By making it a habit, you protect your foundation’s mission, build trust with grantees and donors, and ensure that your resources go where they are intended. Start this week: run through the checklist for your current grants. You’ll be surprised how much peace of mind those five minutes bring. Remember, every grant you make is a chance to advance your mission—compliance ensures that chance is not wasted.