Security and public trust
Official service stays separate from campaign work.
This page describes how WeOffice is being designed. WeOffice is in prelaunch planning - the controls below describe design intent, not verified or certified outcomes.
Status of these statements. WeOffice is a prelaunch product being built by WeHawaii. Nothing on this page is a claim of legal compliance, certification, records-law approval, or guaranteed security. Controls are described as designed or planned until they are implemented and verified.
Design principles
Campaign and official data stay separate
Official-office records and campaign records are kept apart by design. Campaign tags, persuasion scores, party data, and turnout models do not enter the office Case record.
Applications do not query office records directly
Web and mobile applications are designed to reach official-office records through controlled service paths rather than direct queries.
Access follows membership, role, and sensitivity
What a Staff Member can see depends on Office Membership, assigned role, and the sensitivity of the record - not on who happens to have the link.
Sensitive Address handling fails closed
When an address is protected or cannot be resolved safely, the system is designed to withhold rather than guess.
External communications require review
Messages leaving the office are designed to require Staff Member review before they are sent.
Audit and office-transition history
WeOffice is being designed to preserve the record of who did what and when, including across office transitions.
A voter match is optional and purpose-limited
A voter match is never required to create a Person or Case, and it is not used to expand what the office collects.
What we are not claiming yet.
That WeOffice is generally available or already in use by a government office.
That WeOffice complies with any named law, framework, or chamber policy.
That data is certified secure, tamper-proof, or immune from breach.
That WeOffice provides complete records retention, legal hold, or public-record fulfillment today.