Security & Privacy
The Civic Security Platform is designed for civil society organisations that may work with sensitive security information. Use the platform with data minimisation in mind.
What the platform records
The platform stores the organisation records needed for assessments, controls, risk tracking, guidance, incidents, inventories, alerts, training, and related security work. Organisation workspaces are access-controlled.
What you should avoid entering
Do not enter names, personal identifiers, precise locations, contact lists, case details, or other sensitive operational information unless it is necessary for the security task. Prefer organisation-level and role-based records.
Who can access records
Access is controlled by account and organisation role. Platform administrators can access organisation-level oversight data needed to operate and support the service.
AI-assisted analysis
If AI-assisted incident analysis is enabled, incident information used for that analysis may be sent to the configured third-party AI service. Remove names and unnecessary sensitive details before using this feature.
Device security checks
The optional device-security client is designed to report security settings and findings rather than files, messages, browsing history, location, serial numbers, hostnames, or installed-app lists.
Security or privacy questions
For access, security, privacy, or account-recovery questions, contact hello@cakkasecurity.org.