Access control policy

Principles

• Least privilege — only the access needed for the week's role.
• Need to know — sensitive notes are shared only with those who need them to care for a neighbor.
• Accountability — everyone signs in as themselves; please never share a password, even at the front desk.
• Data minimization — collect only what care, safety, volunteering, or stewardship requires.

Who uses the desk

• Admin — opens the desk, manages join codes and staff roster.
• Staff / coordinator — logs hours, neighbors, and visits.
• Volunteer (desk assist) — helps under supervision after join approval.

Neighbor privacy

The live desk uses given names and household codes — not phones, street addresses, or last names in routine logging. Restricted notes and exports follow stricter rules.

Requesting access

Use the Join the Team form. When someone finishes their time on the team, their account is closed to keep everyone's information safe.