Security & Compliance
Security architecture, data protection, and regulatory compliance documentation.
Canon-Mandated Security Principles
| Principle | Canon Ref | Implementation |
|---|---|---|
| Ledger Immutability | Doctrine 1 | Append-only event store; no destructive updates |
| PII Mutability | Doctrine 5 | Crypto-shredding for erasure; audit trail preserved |
| Fail Closed | Authority §1 | Ambiguous security state denies access |
| Vendor Neutrality | Doctrine 3 | No single vendor dependency for security |
Encryption Standards
| Layer | Encryption | Standard |
|---|---|---|
| In Transit | TLS 1.3 | All connections; HSTS enforced |
| At Rest (Database) | AES-256-GCM | PostgreSQL TDE |
| At Rest (Files) | AES-256-GCM | Server-side encryption |
| PII Fields | AES-256-GCM | Per-record key for crypto-shredding |
CANON §10: EXPLICIT NON-GOALS
- ❌ No behavioral ad targeting
- ❌ No donor data resale or enrichment
- ❌ No audience profiling beyond explicit consent
- ❌ No marketing surveillance features
- ✅ Anonymous donations supported
- ✅ Campaign participation ≠ consent for messaging