Film three
Tokenize Identifiers, Never Human Beings
The safeguarding and privacy standard, the access controls, and the practices Angel
Post will never adopt, including the one many technologists would expect.
Narrated · about 2 minutes
Read the transcript
A system built to protect children can become the thing that exposes them. So the
safeguarding standard comes first, before a single family is served.
The founding rule is this. Tokenize identifiers, never human beings.
Every case, request, organization, and user receives a random identifier. Identity
data lives in one place. Service activity lives in another. Names, addresses,
diagnoses, photographs, immigration status, school details, and precise locations
never appear in a request.
Access is earned, not assumed. Verified identity. Background checks. Signed conduct
and confidentiality agreements. Completed training. Least privilege by role and by
county. Multi factor authentication. Immutable audit events. Time limited
invitations.
And an allowlist is never a guarantee of safety, so suspension and appeal are built
in from day one.
Now the prohibitions, which matter just as much.
No public browsing of cases. No donor access to identities. No behavioral scoring
of families. No facial recognition. No covert location tracking. No training
artificial intelligence models on family data. No automated decisions about who is
eligible for help.
And no blockchain for child records. Permanence is the opposite of a child's right
to be corrected, and to be forgotten.
Help that costs a family their privacy is not help. It is a second harm.