Data classes
Public, partner-confidential, operational-sensitive, personal-data, and restricted-incident records are handled differently.
Privacy-preserving by default
Trust, data governance, and audit
Public pages show aggregate or public-safe summaries only. Restricted evidence stays protected.
Evidence
Restricted uploads and before/after snapshots stay in protected evidence storage. Public APIs return aggregated, safe summaries.
Audit logs
Administrative actions, partner reports, recommendation reviews, allocation approvals, objections, reasoned changes, incidents, and evidence reads create audit rows.
Human approval
Decision-support tools can draft briefings and explanations, but accountable people approve, reject, publish, or change plans with reasons.