Wiki source code of Transparency Policy

Last modified by Robert Schaub on 2026/02/08 08:29

version	line-number	content
1.1	1	= Transparency Policy =
1.2	2
1.1	3	== 1. Purpose and Scope ==
1.2	4
1.1	5	This Transparency Policy defines FactHarbor's commitment to openness in all aspects of operations, governance, and finances. It establishes what information is public by default, what may be kept private, and the processes for requesting information.
	6	This policy applies to:
1.2	7
1.1	8	* FactHarbor Organisation (legal entity)
	9	* All FactHarbor projects and services
	10	* Governing Team, staff, and contractors
	11	* All decision-making processes
1.2	12
1.1	13	== 2. Core Principle: Default to Public ==
1.2	14
1.1	15	Default Rule: All organisational information is public unless it meets a specific exception.
	16	This principle reflects FactHarbor's mission: a project claiming to support well-grounded, manipulation-resistant judgments must itself be transparent and accountable.
1.2	17
1.1	18	== 3. What Must Be Public ==
1.2	19
1.1	20	=== 3.1 Financial Information ===
1.2	21
1.1	22	Published annually (within 6 months of fiscal year end):
1.2	23
1.1	24	* Complete financial statements (audited where possible)
	25	* Tax filings (Swiss tax filings per cantonal requirements)
	26	* Income statement showing:
1.2	27	* Grants and donations (aggregate)
	28	* Sponsorships and contracts (aggregate)
	29	* Other revenue sources
1.1	30	* Expense statement showing:
1.2	31	* Program expenses by category
	32	* Administrative costs
	33	* Fundraising costs
1.1	34	* Compensation ranges by role (not individual salaries)
	35	* Major funding relationships (>$50,000 per year or >10% of budget)
1.2	36
1.1	37	=== 3.2 Governance Information ===
1.2	38
1.1	39	Published continuously (promptly of changes):
1.2	40
1.1	41	* Governance documents:
1.2	42	* Verein statutes (bylaws)
	43	* Operating procedures
	44	* Decision-making authority matrix
	45	* Conflict of interest policy
1.1	46	* Governing Team information:
1.2	47	* Current board composition
	48	* Governing Team member bios and affiliations
	49	* Meeting schedules
	50	* Governing Team meeting minutes (with limited exceptions - see section 4)
	51	* Governing Team decisions and resolutions
1.1	52	* Policy changes:
1.2	53	* All policy updates with rationale
	54	* Effective dates
	55	* Community input periods
1.1	56	* Organisational structure:
1.2	57	* Reporting relationships
	58	* Key staff roles (not individual names unless they choose)
	59	* Advisory bodies and committees
	60
1.1	61	=== 3.3 Operational Information ===
1.2	62
1.1	63	Published regularly:
1.2	64
1.1	65	* Transparency Reports (twice yearly):
1.2	66	* Government requests for user data
	67	* Content moderation statistics
	68	* Takedown requests (DMCA, legal)
	69	* Policy violation reports
	70	* Security incident disclosures (after resolution)
1.1	71	* Technical Performance:
1.2	72	* AKEL performance metrics
	73	* Quality gate pass rates
	74	* Risk tier distribution statistics
	75	* System uptime and availability
1.1	76	* Content Statistics:
1.2	77	* Number of claims, scenarios, verdicts
	78	* Publication mode distribution
	79	* Review and audit rates
1.1	80	* Partnership Information:
1.2	81	* Major partnerships and collaborations
	82	* Funding relationships
	83	* Technical dependencies
	84
1.1	85	=== 3.4 Source Code and Technical Specifications ===
1.2	86
1.1	87	Published continuously:
1.2	88
1.1	89	* All source code per open source licenses (MIT, AGPL, CC BY-SA)
	90	* Technical architecture documentation
	91	* Protocol and data model specifications
	92	* API documentation
	93	* Quality gate algorithms and parameters
	94	* Risk tier assignment criteria
1.2	95
1.1	96	== 4. What May Be Private ==
1.2	97
1.1	98	Information may be withheld ONLY when disclosure would:
1.2	99
1.1	100	=== 4.1 Individual Privacy (Highest Priority) ===
1.2	101
1.1	102	Private:
1.2	103
1.1	104	* User personal data (emails, IP addresses, phone numbers)
	105	* Contributor real names (if pseudonymous)
	106	* Personnel files and reviews
	107	* Individual salaries (publish ranges only)
	108	* Medical or family information
	109	* Background checks
1.2	110
1.1	111	=== 4.2 Security ===
1.2	112
1.1	113	Temporarily private (with time limits):
1.2	114
1.1	115	* Unpatched security vulnerabilities (public after patch + 30-90 days)
	116	* Active security incidents (public after resolution)
	117	* Penetration test results (sanitized version public after fixes)
	118	* Authentication credentials and API keys
	119	* Infrastructure-specific security configurations
1.2	120
1.1	121	=== 4.3 Legal ===
1.2	122
1.1	123	Private while active:
1.2	124
1.1	125	* Ongoing litigation details (summary public, details after resolution)
	126	* Attorney-client privileged communications
	127	* Settlement negotiations
	128	* Subpoenas with gag orders (challenge orders exceeding 1 year)
	129	* Whistleblower identity (protected permanently unless they consent)
1.2	130
1.1	131	=== 4.4 Operational ===
1.2	132
1.1	133	Private with conditions:
1.2	134
1.1	135	* Donor information (unless donor consents to publication)
	136	* Abuse investigation details (protect victims)
	137	* Governing Team discussions on personnel matters (outcomes public)
	138	* Strategic plans that would create competitive disadvantage (time-limited: public after 12 months or execution)
1.2	139
1.1	140	== 5. Time Limits on Privacy ==
1.2	141
1.1	142	All private information has an expiration date:
1.2	143
1.1	144	* Security vulnerabilities: Public 30-90 days after patch
	145	* Security incidents: Public immediately after resolution (sanitized)
	146	* Governing Team personnel discussions: Outcomes public, process private for 1 year then reviewed
	147	* Strategic plans: Public after execution or 12 months, whichever comes first
	148	* Legal matters: Public after resolution
	149	* Donor information: May be withheld permanently only with donor objection
	150	Annual Review: All information marked "private" is reviewed annually. If exception no longer applies, information becomes public.
1.2	151
1.1	152	== 6. Transparency Reports ==
1.2	153
1.1	154	Published twice yearly (January and July):
1.2	155
1.1	156	=== 6.1 Government Requests ===
1.2	157
1.1	158	* Number of requests for user data (by type)
	159	* Number of requests complied with
	160	* Number of requests challenged
	161	* Number of users affected
	162	* Types of data requested
1.2	163
1.1	164	=== 6.2 Content Moderation ===
1.2	165
1.1	166	* Total moderation actions by category
	167	* Publication mode changes (Mode 1 → 2, etc.)
	168	* Quality gate failures by gate
	169	* Community flags and expert reviews
	170	* Takedown requests and responses
1.2	171
1.1	172	=== 6.3 Security ===
1.2	173
1.1	174	* Security incidents (after resolution)
	175	* Vulnerability reports received
	176	* Bounties paid
	177	* Patches deployed
	178	* Audit findings (sanitized)
1.2	179
1.1	180	=== 6.4 Performance ===
1.2	181
1.1	182	* AKEL performance metrics
	183	* User growth and engagement
	184	* Content growth
	185	* Community contributions
	186	* System availability
1.2	187
1.1	188	== 7. Information Request Process ==
1.2	189
1.1	190	=== 7.1 Submitting a Request ===
1.2	191
1.1	192	Anyone may request organisational information:
1.2	193
1.1	194	1. Email: [Transparency contact to be established]
	195	2. Include:
1.2	196
	197	* Specific information requested
	198	* Rationale for request
	199	* Preferred format (if applicable)
1.1	200	3. Expect: Initial response within 14 business days
1.2	201
1.1	202	=== 7.2 Request Evaluation ===
1.2	203
1.1	204	Requests are evaluated against:
1.2	205
1.1	206	* Is information already public? (link provided)
	207	* Does exception in Section 4 apply?
	208	* Can information be disclosed with redactions?
	209	* Is time limit on privacy expired?
1.2	210
1.1	211	=== 7.3 Response Types ===
1.2	212
1.1	213	* Granted: Information provided promptly
	214	* Partially Granted: Information with redactions provided, explanation of redactions
	215	* Denied: Written explanation of which exception applies
	216	* Deferred: If time-limited exception, date when information will become public
1.2	217
1.1	218	== 8. Appeals Process ==
1.2	219
1.1	220	If request is denied:
1.2	221
1.1	222	=== 8.1 First Appeal ===
1.2	223
1.1	224	1. Submit appeal to Transparency Committee (if established) or Governing Team
	225	2. Include:
1.2	226
	227	* Original request
	228	* Denial reason
	229	* Additional context or rationale
1.1	230	3. Decision promptly
1.2	231
1.1	232	=== 8.2 Final Appeal ===
1.2	233
1.1	234	1. Appeal to Full Governing Team of Leads
	235	2. Governing Team reviews at next scheduled meeting
	236	3. Governing Team decision is final
	237	4. Rationale published (unless it would disclose the private information)
1.2	238
1.1	239	== 9. Community Input ==
1.2	240
1.1	241	=== 9.1 Policy Changes ===
1.2	242
1.1	243	Before making material changes to transparency commitments:
1.2	244
1.1	245	1. Proposal published with rationale
	246	2. Public comment period (minimum 30 days)
	247	3. Community input considered
	248	4. Decision rationale published with final policy
1.2	249
1.1	250	=== 9.2 Ongoing Input ===
1.2	251
1.1	252	Community may:
1.2	253
1.1	254	* Request additional transparency commitments
	255	* Suggest improvements to reporting
	256	* Identify information that should be public
	257	* Challenge exceptions
	258	Submit suggestions to: [Transparency contact to be established]
1.2	259
1.1	260	== 10. Compliance and Oversight ==
1.2	261
1.1	262	=== 10.1 Internal Oversight ===
1.2	263
1.1	264	* Transparency Officer (staff or board designee):
1.2	265	* Reviews all privacy classifications
	266	* Manages information requests
	267	* Prepares transparency reports
1.1	268	* Annual Transparency Audit:
1.2	269	* Reviews all "private" classifications
	270	* Checks compliance with publication schedules
	271	* Assesses process effectiveness
	272
1.1	273	=== 10.2 Public Reporting ===
1.2	274
1.1	275	Annual transparency compliance report includes:
1.2	276
1.1	277	* Number of information requests received
	278	* Request grant/deny statistics
	279	* Exception usage (how often each applied)
	280	* Privacy expiration reviews
	281	* Improvements made to process
1.2	282
1.1	283	=== 10.3 Independent Audit ===
1.2	284
1.1	285	When feasible (budget permitting):
1.2	286
1.1	287	* Independent third-party transparency audit
	288	* Results published
	289	* Recommendations implemented or explanations provided
1.2	290
1.1	291	== 11. Enforcement ==
1.2	292
1.1	293	=== 11.1 Violations ===
1.2	294
1.1	295	Violation of this policy includes:
1.2	296
1.1	297	* Withholding information that should be public
	298	* Failing to publish required reports on schedule
	299	* Misclassifying public information as private
	300	* Extending privacy beyond time limits without review
1.2	301
1.1	302	=== 11.2 Consequences ===
1.2	303
1.1	304	* Internal violations: Performance review, retraining, or disciplinary action
	305	* Governing Team violations: Governing Team review, potential removal
	306	* Persistent violations: Independent investigation
1.2	307
1.1	308	=== 11.3 Whistleblower Protection ===
1.2	309
1.1	310	Anyone may report transparency violations to:
1.2	311
1.1	312	* [Transparency contact to be established]
	313	* Any board member directly
	314	* External parties (regulators, media)
	315	Whistleblowers are protected from retaliation. Reports may be anonymous.
1.2	316
1.1	317	== 12. Updates to This Policy ==
1.2	318
1.1	319	Changes to this Transparency Policy:
1.2	320
1.1	321	* Require Governing Team approval
	322	* Must include 30-day public comment period
	323	* Are published with rationale
	324	* Take effect 30 days after final publication
	325	Version History:
	326	* 0.9.28 (2025-12-17): Initial policy based on best practices from Wikimedia Foundation and Mozilla Foundation
1.2	327
1.1	328	== 13. Contact ==
1.2	329
1.1	330	Transparency Requests: [Transparency contact to be established]
	331	Appeals: [Governing Team contact to be established]
	332	Whistleblower Reports: [To be established - secure channel]
1.2	333
1.1	334	== 14. Related Policies ==
1.2	335
1.1	336	* [[Open Source Model and Licensing>>FactHarbor.Organisation.Open Source Model and Licensing]]
	337	* [[Privacy Policy>>FactHarbor.Organisation.How-We-Work-Together.Privacy-Policy]]
1.2	338	* [[Governance>>Archive.FactHarbor 2026\.02\.08.Organisation.Governance.WebHome]]
1.1	339	* [[Finance & Compliance>>FactHarbor.Organisation.Finance-Compliance]]

Wiki source code of Transparency Policy

Applications

Navigation

Need help?