Clear answers before you share.
This prototype demonstrates the structure Roots should provide. Final legal wording requires Swiss counsel and a formal data-protection impact assessment.
What users must understand
✓What data is collected and why.
✓Who can see each field, file and message.
✓How long records and evidence are retained.
✓How to access, correct, export or request deletion.
✓When safeguarding duties may limit confidentiality.
Data classification
PublicAggregated statistics
InternalSchool analytics
ConfidentialCase information
Highly confidentialIdentity, evidence, health or sexual-harm data
Technical baseline
Encryption in transit and at rest, role-based access, audit logs, secure uploads, retention automation, backup testing, rate limiting, breach response and regular penetration testing.