Donor data vault
Every record sealed. Every access provable.
Per-record AES-256-GCM tokenization, a tamper-evident hash-chain audit trail, and two-admin break-glass emergency access — nonprofit-grade protection for the Founding Circle and Born Between 2 Generals-anniversary donor list.
6
Donor records
18
Fields sealed (AES-256-GCM)
$97,400
Lifetime giving
3
Admins
Audit chain integrity
INTACT3 links, rooted at genesis. Each access binds to the one before it.
audit.chain
$ donorsec verify --chainlinks: 3head: 6625985b244243207499f1b4…status: OK — no tampering detected
Break-glass status
SEALEDSensitive export requires two distinct admins to authorize. No single person can unlock the data alone.
- • One admin opens an emergency request
- • A second, distinct admin must approve
- • Grants expire automatically (30 min)