Security and privacy

Trust begins with responsible information handling.

Citizen Link is designed to support privacy-conscious workflows and controlled access to constituent information. Responsible handling is an important part of building trust between citizens and their representatives.

Citizen Link

Trust by design

Data protection

Appropriate technical safeguards

Access awareness

Permissions aligned with responsibilities

Privacy transparency

Clear information-handling practices

Security depends on implementation, infrastructure, and ongoing operational practices—not just design.

Our approach

Three principles that guide our approach

Responsible information handling requires attention to data protection, appropriate access, and transparency about how information is used.

01

Secure data handling

Personal information deserves careful handling throughout its lifecycle.

  • Appropriate technical safeguards should be applied to information in transit and at rest.
  • Security depends on the deployed infrastructure, application configuration, and operational practices.
02

Controlled access

Access to information should match each user's assigned responsibilities.

  • Access should be limited to authorized users who need the information for their work.
  • Account permissions and access settings should be configured and reviewed appropriately.
03

Privacy and transparency

People should be able to understand why their information is requested and how it is used.

  • Information should be collected and used for clearly explained platform purposes.
  • Our Privacy Policy describes information handling, retention, sharing, and privacy-related requests.

A shared responsibility

Security is an ongoing process.

Technology, configuration, and user practices all contribute to how information is protected. Security settings should be implemented and maintained in line with the platform's actual deployment.

Infrastructure and configuration

Encryption, storage protections, and other safeguards should be selected and verified for the infrastructure and services actually in use.

Accounts and permissions

Users should protect their sign-in credentials and use only the access and information necessary for their responsibilities.

Clear privacy information

Review the Privacy Policy to understand the intended handling of personal information, including applicable retention and deletion processes.
Learn more

Your information matters.

Read our Privacy Policy for more information about data collection, use, sharing, retention, and how to submit a privacy-related request.

Privacy Policy