Encryption
All data collected through Chancery — personal, operational, and statistical — is encrypted at rest using AES-256, and encrypted in transit using TLS 1.3. Sensitive identity fields (such as national ID numbers) are additionally masked in the interface by default; only staff with explicit permission can reveal the underlying value, and every reveal is written to the audit trail as its own distinct event.
Role-Based Access Control
Chancery enforces four distinct roles — System Administrator, Data Entry Officer, Analyst/Reviewer, and Auditor — on every page and every action, not only in documentation. A guiding principle shapes the whole permission model: the System Administrator owns the system, not the content. Administrators manage users, permissions, and settings, but cannot create, approve, reject, or reveal a single record. This keeps oversight and content authority genuinely separated.
Maker-Checker Workflow
Every record moves through the same lifecycle regardless of stream: Draft → Submitted → Under Review → Approved/Rejected → Published → Archived. Segregation of duties is enforced at the system level — a reviewer can never approve or reject a record they submitted themselves. No role, including System Administrator, can hard-delete a record; only a reversible Archive action is available.
Audit Logging
Sign-ins, record views, edits, approvals, rejections, PII reveals, exports, permission changes, and denied access attempts are all written to an append-only audit log, attributed to the acting user and timestamped. Auditors have full read access to every record and the complete audit trail, and cannot modify data of any kind — a strictly read-only oversight role.
Accessibility
Chancery is designed to conform to WCAG 2.1 Level AA — the standard named in current binding accessibility law in multiple jurisdictions. That includes keyboard navigation throughout, visible focus states, 4.5:1 minimum text contrast, and never relying on color alone to convey status or classification. Read the full Accessibility Statement.