Public by default
- The trust method and verification ladder
- Program descriptions and locations
- Published proof cards at batch level
- Aggregate counts and caveats
- What evidence was reviewed in summary form
Privacy
Privacy is not an extra feature here. It is part of the product.
The system is built around a simple separation: public rules, private case material. Donors should understand the work without gaining access to private lives.
Private by default
- Names, faces, and direct identifiers
- Attendance files and source rosters
- Raw receipts or ledgers tied to individuals
- Internal partner contact details
- Any media or notes that could re-identify children