Policies
Cooperative policies
What we bind ourselves to. Sandbox drafts labeled. Production versions carry a signed effective-date footer, reviewed annually.
SOC 2 P1.1 · GDPR Art. 13-14 · CCPA §1798.100
Sandbox draftPrivacy Policy →
How the cooperative collects, uses, retains, and shares personal data. Cross-references data subject rights at /profile/data-rights.
Version 0.1Last reviewed 2026-07-01
SOC 2 CC1.1 (Governance and control environment)
Sandbox draftCooperative Covenant →
The behavior expected of every Member and Partner in the cooperative. Governance principles, compliance ladder, penalty mechanic.
Version 0.1Last reviewed 2026-07-01
ISO 27001 A.15.1 · GDPR Art. 28
Sandbox draftSubprocessor Registry →
Third parties the cooperative shares data with to operate the platform. Categories, jurisdictions, DPA status. 30-day advance notice on additions.
Version 0.1Last reviewed 2026-07-01
Sandbox draft posture
Drafts stay Sandbox draft until counsel review and Member counter-signature at production. Draft language matches the code; production is calibration, not rewrite.