Stronger Communities. A more resilient Hawaiʻi.
OUR COMMITMENT
Support Local Hawaii works to maintain digital spaces that are safe, trustworthy, and appropriate for the communities they serve.
We seek to protect the confidentiality, integrity, and availability of information entrusted to the platform while maintaining practical access for authorized stewards, partners, and community members.
Our approach is guided by the same principles that guide the broader Support Local Hawaii mission: respect for people and place, responsible stewardship, transparency, accountability, collaboration, and service to Hawai‘i.
Steward Access & Responsibility
Access to steward systems, including the Support Local Hawaii ‘Ohana Portal, is provided only to authorized individuals and approved users.
Every steward is responsible for protecting their account and using their access solely for legitimate stewardship purposes.
Stewards should:
- Keep passwords and authentication credentials private and secure; never share accounts or knowingly allow another person to use their credentials.
- Access steward systems only for authorized Support Local Hawaii activities and immediately report suspected unauthorized access, compromised credentials, suspicious activity, security vulnerabilities, or accidental disclosure of protected information.
- Use reasonable care when accessing the portal from shared or public devices and sign out when finished.
- Treat information encountered through stewardship activities with appropriate discretion, respect, and confidentiality.
Access is a responsibility, not an entitlement. Permissions may be changed, suspended, or revoked when necessary to protect the platform, its participants, or the communities we serve.
Responsibile USE
Support Local Hawaii systems should always be used in a manner consistent with our Charters, Policies, Stewardship Agreements, and Applicable Law.
Users may not attempt to gain unauthorized access to accounts, systems, records, or administrative functions; circumvent security controls; introduce malicious software or harmful code; intentionally disrupt platform services; scrape, harvest, or improperly extract protected information; impersonate another user; or use privileged access for personal advantage or purposes unrelated to authorized stewardship.
Activity that threatens the security or integrity of the platform may be investigated and addressed as appropriate.
PROTECTING COMMUNITY DATA
Information entrusted to Support Local Hawaii should be collected, accessed, shared, and retained thoughtfully.
Access to non-public information should be limited to people who have a legitimate need for it. Stewards should not disclose confidential, personal, organizational, or security-sensitive information obtained through their role unless authorized to do so.
Where possible, we seek to practice data minimization: collecting and retaining only information that serves a legitimate purpose.
Community information should never become a commodity simply because technology makes its collection possible.
Monitoring & Security
To protect our community and systems, Support Local Hawaii may log and review activity occurring within protected areas of the platform.
Security records may include information such as IP addresses, dates and times of access, account identifiers, authentication activity, administrative actions, system events, and other information reasonably necessary to identify misuse, investigate security incidents, maintain system integrity, or comply with applicable requirements.
Monitoring is undertaken for legitimate security, operational, accountability, and fraud-prevention purposes—not as a substitute for the trust upon which stewardship depends.
Use of protected systems constitutes acknowledgment that appropriate security monitoring may occur.
STEWARDSHIP OF PRIVILEGED ACCESS
Some stewards may be entrusted with administrative, moderation, technical, financial, directory, project, or other elevated permissions.
Greater access carries greater kuleana.
Privileged access should be used only when necessary to perform an authorized responsibility. Stewards with elevated permissions should avoid accessing information merely because their role technically permits them to do so.
Where practical, Support Local Hawaii seeks to follow the principle of least privilege: providing people only the access reasonably necessary for their responsibilities.
Security Incidents
A strong security culture depends upon people speaking up quickly when something does not seem right.
If you believe an account has been compromised, information has been exposed, a security control has failed, or suspicious activity is occurring, please report it promptly.
Good-faith reporting helps protect everyone.
Support Local Hawaii may investigate reported or detected security events, preserve relevant records, restrict access while an incident is reviewed, take reasonable protective measures, and notify affected parties or appropriate authorities when required.
Responsible Security Research
We appreciate people who help identify ways our systems can be made safer.
If you believe you have discovered a security vulnerability affecting Support Local Hawaii, please report it privately rather than publicly disclosing or exploiting it.
Good-faith security research should avoid accessing, modifying, downloading, destroying, or exposing information belonging to other people; disrupting services; using social engineering; or continuing testing after sufficient information has been gathered to demonstrate the issue.
A dedicated vulnerability-reporting process can be provided as the platform develops.
Third-Party Services
Like most modern digital platforms, Support Local Hawaii may rely upon trusted service providers for functions such as hosting, communications, authentication, analytics, payments, or other infrastructure.
Where third parties process information on our behalf, we seek to select and manage those relationships responsibly and provide access only as appropriate for the services being performed.
No digital system can guarantee absolute security. We therefore combine reasonable safeguards with ongoing stewardship, review, and improvement.
When Stewardship Ends
When a steward’s role changes or concludes, access to systems and information associated with that role may be changed or removed.
Any confidential or protected information obtained through stewardship remains subject to applicable confidentiality obligations after access ends.
Where appropriate, Support Local Hawaii may also preserve records necessary for security, accountability, legal compliance, or continuity of stewardship.
A Shared Kuleana
Technology alone cannot create a trustworthy community.
Trust is created by the choices we make with the access, information, and responsibility placed in our hands.
Every steward contributes to the security of Support Local Hawaii by protecting their account, respecting the privacy of others, using information responsibly, reporting concerns, and acting consistently with the commitments we have made to one another and to Hawai‘i.
Mālama what has been entrusted to you.
Protect the People. Protect the Purpose. Protect the ‘Ohana.
Rooted in Aloha. Guided by Kuleana.