Governance and assurance
Trust commitments
These commitments describe how the service should be operated and how organisations should use it.
Purpose limitation
Submitted records should be processed only for a documented, approved business purpose and not reused casually for unrelated activity.
Authorised access
Access is limited to approved organisations and users. Roles, sessions, and account controls are intended to reduce unnecessary access.
Data minimisation
Users should submit only accurate, relevant information needed for the authorised review and avoid guessed or excessive fields.
Evidence transparency
Outputs should include enough context, source links, evidence-level category, and review guidance for an authorised user to assess uncertainty.
Human accountability
UONE supports review; it does not transfer responsibility for decisions away from the record or its authorised personnel.
Auditability
Important account, campaign, export, and administrative events should be recorded so actions can be investigated and reconciled.
Honest limitations
The platform should not promise a fixed success rate, guaranteed contact details, continuous availability, or legal compliance in every circumstance.
Responsible support
Support guidance should help users recover without requesting passwords, verification codes, or unnecessary submitted records.
Responsible processing
Customer information is processed only for documented, legitimate service purposes and should not be reused for unrelated commercial activity. Customer organisations remain responsible for establishing authority and an appropriate legal basis.
Security commitment
UONE maintains a programme of operational monitoring, incident response, periodic review, and continuous improvement for its technical and organisational safeguards.
Clear ownership
Shared responsibility
UONE responsibilities
Operate access, campaign processing, recovery, audit, and support controls consistently; communicate limitations honestly; and avoid exposing sensitive implementation details.
Record responsibilities
Establish lawful authority, manage authorised users, provide relevant information, review outputs, protect exports, and decide how evidence may be used.
Trust is not a substitute for review
Controls can reduce risk, but every organisation must still assess its own legal duties, internal approvals, and the context of each result.
Transparent without exposing protective controls
UONE provides meaningful information about governance, access, retention, oversight, and responsible use. Detailed security architecture, credentials, configuration values, and operational control thresholds remain restricted to authorised internal personnel.
Continue exploring
Related public guidance
Review the supporting security, privacy, and responsible-use commitments.