For NGOs
Research that protects people
Plan public-interest verification so the participant's safety matters more than a complete dossier.
Content state: draft Owner: owner:program-safety Next review: 2026-09-07
Start with purpose and minimisation
State the public interest and the minimum data set. If a conclusion does not require identification, do not collect it.
- Separate public facts, sensitive information and data that must never enter the system.
- Name retentionThe approved time and conditions before material is deleted, archived or placed on legal hold., access and a responsible owner.
- Use the synthetic Workbench to train the team.
Work with risk
SafeguardingThe duty to design protection from harm, safe contact and escalation for vulnerable participants before work begins., abuse and the threat modelA structured description of assets, adversaries, attack paths, impact and controls. are reviewed before collection, not after publication.
- Never promise confidentiality that the system has not demonstrated.
- Do not upload documents or photographs to the open candidate.
- Stop and escalate to the security owner when the boundary is unclear.
Handoff the result
Show sources, limitations and corrections so a partner can independently check the conclusion.
- Keep testimony, hypothesis and recommendation separate.
- Record correction requests and the change history.
- A public case requires separate approval and a lawful basisA documented legal reason that makes collection and processing lawful for a specific purpose..