Governance at a glance
Conflict-of-interest renewals
Each person renews every disclosure on a fixed cycle. Sorted by who needs attention first.
Documents by category
Reviews coming up
next 12 monthsRecent signatures
Document library
Every policy, procedure and manual in one place, with the email it came from.
Meetings and minutes
The Board's official record: each meeting with its agenda, decisions, recusals and action items, and the minutes once they are approved. The Secretary keeps this register; it is open to Board editors only.
Private by design
This portal holds Sacred Learning's most sensitive records: Board minutes, conflict-of-interest disclosures and signatures. This page sets out exactly how they are protected today, and what will be added when the portal moves to its own website.
How your records are protected today
Allowlisted sign-in
The portal sits behind Cloudflare Access: identity is verified before any page or record is served, and only the email addresses on the Board's allowlist can enter. No allowlist entry, no access.
Encrypted in transit
Every page, file and record travels over HTTPS (TLS), the same encryption that protects online banking and email.
Stored with Cloudflare
Records and files are kept in Cloudflare's D1 database and KV storage, encrypted at rest on Cloudflare's infrastructure. Its security program and certifications are published at cloudflare.com/trust-hub.
Least access, checked by the server
Members can read the library and sign their own forms, and nothing more. Only Board editors can change records or see meeting minutes and decisions. The server checks these rules on every request; they aren't just hidden on screen.
Tamper-evident signatures
Each e-signature records the signer's account, the time, the document version and a SHA-256 fingerprint of the exact file that was signed, so any later change to the file can be detected.
Nothing leaves without a person
Reminders are saved as email drafts for a Board member to review and send. Sijill can read records to answer questions, but it can't change or send anything.
Records stay with the Board
The signature log exports to a spreadsheet, and the Board keeps a copy of the portal's source and records, so the portal can move to Sacred Learning's own hosting at any time.
Good to know
Files attached in the library can be opened by anyone with portal access. Minutes are the exception: their files are only linked from the Board-only register. Keep executive-session material in a restricted Google Doc and link to it.
When the portal moves to sacredlearning.org
Planned. Not in place yet.
- In placeSign-in through Cloudflare Access, limited to an approved allowlist of Board members. Google SSO with 2-Step Verification can be added at handover.
- In placeRecords and files encrypted at rest on Cloudflare (AES-256), with 30 days of point-in-time database restore.
- In placeA server-side log of every change and upload, with who made it and when. A log of views is planned.
- PlannedDaily encrypted backups, with restores tested each quarter.
- PlannedRestrictions set per record (for example, executive-session minutes), not only per section.
- PlannedA yearly access review by the Secretary, removing anyone who has left their role.
Recent hardening
Sept 17, 2026. Removed "anyone with the link" access from the Board minutes of July 29 (anyone could view) and August 19 (anyone could edit) in Google Drive. Minutes moved into the Board-only register. The same day, removed link access from the September 16 draft minutes (anyone could view).
How we talk about security
We don't call anything "military-grade" or "unhackable"; no system is. This page says exactly what protects the records, marks planned work as planned, and is updated whenever something changes.
Governance map
Who owns each document and who must sign it. Select a person or a document to trace its connections and act on its flags.
Governance calendar
Reviews and signatures falling due over the next twelve months. Select an item to find it on the map.
Organizational chart
Select a person to see their role, term and disclosure status.
Roster and terms
Portal access list
Addresses allowed in once Google sign-in is added. Today, access follows this page's share settings.
Conflict-of-interest register
Board members, team members and volunteers sign each disclosure and renew it on schedule. Every signature is logged with its date, version and method.
Signature log
Sijill
The register. Ask anything about Sacred Learning's governance: bylaws, policies, forms, people, deadlines and Board decisions. Sijill looks it up in the records and cites where the answer came from.
Answers come from the portal's records and can be wrong. Check the cited document before acting, and ask counsel about legal questions.