- Notice before collection
- Resolve organization, role, jurisdiction and service; present current privacy, relationship, confidentiality, no-advice, no-engagement, emergency and deadline language in an accessible and understandable form; state purpose and retention; capture the applicable authorization and preserve withdrawal and display evidence.
- Minimum staged data and exact-source separation
- Justify each field by intake stage, defer merits and sensitive detail until necessary, preserve exact statements and documents separately from normalized facts, summaries and inferences, identify source and effective time, allow correction and prevent secondary use outside the authorized purpose.
- Scoped identity and conflict review
- Use stable identities, aliases and relationship candidates, isolate tenants and matters, minimize the facts exposed before conflict clearance, return opaque review tokens rather than other-client information, log access and require qualified resolution, screening, consent or decline decisions where applicable.
- Fair service, urgency, and safeguarding candidates
- Version service, jurisdiction and capacity rules, exclude protected characteristics and sensitive proxies from ranking, expose reasons and alternatives, provide accessible manual routes, route urgency and safety flags promptly and keep legal deadlines, competence, vulnerability and safeguarding decisions with qualified owners.
- Qualified disposition and relationship-safe messages
- Require named review for engagement, more information, decline, referral and safeguarding; use approved language that states receipt, relationship, next action and limits; prohibit advice and promises; obtain engagement acceptance separately; and create clients, matters and permissions only after authorization.
- Security, retention, deletion, and recovery
- Protect submissions and credentials, restrict downloads and notifications, scan files safely, scope provider and recipient access, test restore and degraded intake, retain only under approved policy and legal holds, support data rights and complete evidence export and propagate deletion and correction through every downstream copy.