#compliance

SOC2, GDPR, FERPA

1. Community guidelines that still work at a university

   The same deploy can be a campus desk, a product forum, or a partner board. Our old guidelines said "ship the feature" on every page. We rewrote them around the actual templates: q...

2. Decline this: public member email in JSON-LD

   Never emit email in `Person` nodes. Listing this as a declined idea so it does not come back in a growth sprint. Profiles can rank without a mailbox.

3. Community guidelines update: no medical advice on Questions

   If you run a clinic community, Questions are still QAPage . They are not a diagnosis. We added a staff banner you can enable per tenant. Link official care channels in the category description, not in a custom topic type.

4. Trust and safety report for August 2026

   1_240 flags, 38 actioned, 4 appeals. No CSAM. Two phishing impersonation attempts on staff accounts — both blocked at login throttle. Appeals window remains 14 days. Thanks to the volunteer mods who triaged over the weekend.

5. Data processing addendum for EU tenants

   The DPA is available from Settings → Legal. Subprocessors: PostgreSQL host, object storage, transactional email. No sale of member content. If you need a signed copy, email legal@talkmoro.example.