PRIVACY

Measure privately. Share deliberately.

Private evidence and public validation are different objects. Publishing one should never expose the other by accident.

01

Private by default

Addresses, utility account numbers, full VINs, bills, payment data, precise usage history, and unrelated portfolio objects stay private unless the user explicitly chooses otherwise.

02

Granular sharing

Choose private, unlisted, access-controlled, public summary, or public detailed report. Select the location precision, reporting interval, raw values, and expiration.

03

Aggregate comparison

Peer comparisons use groups rather than identifiable neighbor records and should enforce minimum cohort sizes before a comparison appears.

04

Revocable connections

Connected energy and object data should be permissioned, visible, and revocable. Users can understand what is connected and when it was last refreshed.

PUBLIC SUMMARY

What a visitor may see

  • Object type and optional nickname
  • General region when approved
  • Reporting period and current status
  • Aggregate reduction and coverage
  • Methodology, evidence state, and confidence
  • Retirement and verification reference

PRIVATE RECORD

What remains protected

  • Street address and utility account
  • Full VIN, license plate, and owner identity
  • Uploaded bills and private documents
  • Precise interval data unless shared
  • Payment information
  • Other objects in the portfolio

START WITH ONE OBJECT

Make the action visible.
Make the evidence last.

Questions about privacy