Role-based access
Principal, chief of staff, booth in-charge, grievance desk — named roles, not a shared password. Sensitive races are compartmented. A constituency management platform that anyone can open is not a platform.
Operating controls
Governance, access, and accountability
mandata.ai holds political and constituency data that can damage a principal if it leaks, drifts, or is used without authority. Barnstorm Co-operations treats access as an operating problem: who may see, who may send, who may close a case, and what the log will show on Monday. This is office-level discipline, not a legal appendix.
Permissioned outreach
Citizen connect is not a blast list. Send rights are granted, scoped to a universe, and revocable. Unpermissioned outreach does not leave the console.
Activity history
Case notes, assignments, outreach, and fund-status changes write an audit trail. Accountability is a log a chief of staff can read, not a meeting that never happened.
Human oversight
Assistance may rank, route, and draft briefings. It does not publish, sanction, or close a case without a named operator. Models are staff, not oracles.
Workflow governance
Jan-Sunwai SLAs, presence calendar, and MPLADS / MLACDS status are visible to the roles that own them. Neglect is expensive because it is visible.
Office-level discipline
Constituency operations run as a controlled environment: who is in the file, who touched it, and whether the booth sheet still matches the graph.
Operational discretion
Live races and sensitive cases stay inside the room that owns them. Barnstorm Co-operations will not sit both sides of a contest. Platform licenses in a contested constituency are disclosed before contract.
Questions principals actually ask
Access and accountability
Role-based access: principal, chief of staff, booth in-charge, grievance desk. Not a shared password. Sensitive races are compartmented.
No. Citizen connect is permissioned, scoped to a universe, and revocable. Activity is written to the audit trail.
No. Assistance may rank and draft. Publishing, sanctioning, and closing a case require a named operator.
Jan-Sunwai SLAs, presence calendar, and MPLADS / MLACDS status are visible to the roles that own them. Neglect is expensive because it is visible.