Production policy

Privacy

Data Minimization

Reporter contact information is used for follow-up and is stored as a hash in the default case record. Public incident records exclude contact data, suspect contact fields, exact private locations, and admin-only evidence.

Evidence Handling

Evidence metadata is separated by consent scope: public redacted, admin only, or official packet. Production storage must use private buckets, signed URLs, audit logs, and restricted staff access before accepting real file uploads.

Colombia Data Protection

Before launch, the operator must complete counsel review for Colombian Law 1581, data-subject access/correction/removal workflows, database registration duties where applicable, and cross-border transfer disclosures. Data-subject requests can be started at Review Requests.