← Governance framework
Governance
Third-Party and Ecosystem Governance Policy
Rules for onboarding and governing external participants in the ImpactMiles ecosystem, including charities, corporate partners, community advisors and interoperating KERI networks.
- Version
- v1.0
- Effective
- 2026-07-19
- Last reviewed
- 2026-07-20
- Next review
- 2027-07-19
- Owner
- Chief Trust Officer
- Approver
- Board of Directors
Anchored by content hashissued 2026-07-29
Payload hash
ecc26ef0d1e04a3a66975eddef10dfe2ee8e1806cf7e6303569b0401ba3fc999SHA-256 digest of the receipt content
Issuer AID
EP1_FGkcwfHAuih6VUzv9kgAVBvvSoaswSUao61lkxhEParty that issued this receipt
ImpactMiles handle
audit:governance:ecc26ef0d1e04a3aThis receipt is anchored by content hash. A resolvable credential SAID is not available for this record.
Applies to
- All third-party organisations onboarded to the platform
- Community advisory participants
- Interoperating KERI ecosystems and cross-signing arrangements
Jurisdictions
- Hong Kong (PDPO, IRD s.88)
- United Kingdom (UK GDPR, DPA 2018)
- European Union (GDPR)
- Singapore (PDPA)
- Australia (Privacy Act 1988)
- Japan (APPI)
- Wider APAC per country taxonomy
How this is applied in-product
- Admin verification and Veraf.ai gating on onboarding
- Written partnership agreements before any commercial engagement
- Interoperability agreements before any cross-ecosystem credential issuance
1. Charity Onboarding and Verification
Charities self-declare status during onboarding, upload registration and licence evidence and undergo admin verification. Higher trust tiers require additional evidence such as audited accounts or IRD s.88 status.
2. Corporate Partner Agreements
- Standard master agreement with data protection, brand use and anti-bribery clauses.
- Enhanced due diligence for partners in higher-risk sectors or jurisdictions.
- Annual relationship review and renewal.
3. Community and Participant Voice
- Structured feedback channels (surveys, town halls) at least twice per year.
- A rotating community advisory panel provides non-binding input on product and policy changes.
- Public roadmap items open for comment for at least 14 days before Board decision.
4. KERI Interoperability
- Interoperating ecosystems must publish a compatible verification specification.
- Cross-signing or credential re-issuance requires a written interoperability agreement and Trust and Verification Committee approval.
- Suspected compromise in a partner ecosystem triggers immediate isolation and dispute triage.
Questions or concerns about this policy? Contact the DPO.