pii-guardian

This skill ensures that GraceGiver handles sensitive church data with the highest level of security and privacy.

Core Workflows

1. Privacy Review

Before committing changes to the API or Frontend, run the privacy audit to ensure no sensitive data is leaked in logs:

node conductor/pii-guardian/scripts/audit_pii.cjs

2. Implement Validation

When creating new forms or endpoints, ensure they use the central validation logic in server/validation.js. Use the snippets in assets/validation_snippets.js for common tasks like masking and sanitization.

3. Standards Compliance

Consult references/pii_standards.md to verify if new data points are considered PII/SPI and follow the mandated handling procedures.