Havenwatch Foundation

Digital Investigations & Analysis

The Digital Investigations & Analysis department works only on cases that have passed intake review. Investigators perform open-source analysis to clarify context: public profiles, platform activity, timelines, and connections. All methods are lawful and non-intrusive.

Investigators do not validate evidence or decide escalation. Their role is to analyze and document findings to support legal review or operational decisions. Speculation, invasive techniques, and unverified linking are prohibited. If analysis reaches a dead end, the case is documented and returned rather than forced forward.

Legal, Policy & External Relations

This department ensures Havenwatch actions remain compliant, consistent, and responsible. Legal reviewers assess whether a case meets requirements for lawful reporting and approve any external cyber-tip or handover. No submission occurs without legal review.

The department also maintains internal policies, SOPs, and relationships with platforms, NGOs, and reporting channels. Legal reviewers exercise oversight and decision-making based on documented facts; they do not perform investigative tasks themselves.

Operations & Case Management

Operations keeps Havenwatch functional, secure, and stable. Responsibilities include assigning case handlers, monitoring workload, managing access to systems, and ensuring cases progress without overloading volunteers.

Operations handles inactivity management, access pauses, and internal reviews related to conduct or process concerns. Operations does not investigate or make legal decisions; it provides coordination, continuity, and internal safety to reduce organizational risk.

Communications, Education & Outreach

This department focuses on prevention, awareness, and education. It develops research-based public material intended to inform rather than sensationalize. All public content is reviewed for accuracy and legal compliance prior to release.

Communications staff do not handle case investigations. The separation protects operational integrity and prevents conflicts between messaging and investigations.

Programs & Conditional Activities

In addition to core departments, Havenwatch may run limited programs under strict conditions. Some activities — for example, direct digital interaction tied to a case — are permitted only when a case is actionable, the person of interest is identified, and legal approval is granted.

Programs are narrowly scoped, time-limited, and closely supervised. They are activated only when standard reporting or analysis is insufficient, and are paused or discontinued when criteria are not met.

How a case moves through Havenwatch

Typical flow:

• Intake: Reports are received and screened for evidence quality and relevance.
• Decision: Cases that do not meet standards are closed or recorded with a rationale.
• Analysis: Eligible cases are assigned for open-source analysis (Digital Investigations).
• Legal review: Findings are reviewed by Legal for suitability to escalate or hand over.
• Handover: Only after legal approval is a cyber-tip or structured report submitted to an appropriate entity.
• Outcome: At any stage a case may be paused, documented, closed, or escalated based on evidence and capacity.

Not all cases move forward by design. Priority is given to accuracy, safety, and lawful handling over volume or speed.

Why this structure matters

Separating intake, analysis, legal review, operations, and communications prevents concentration of control and reduces common failures:

• Decisions are recorded, reviewed, and accountable.
• Operational and legal checks limit risky, speculative, or invasive actions.
• Volunteers operate within clear boundaries to protect victims, reporters, and the organization.
• The structure supports a transition toward a formal non-profit model and reflects a commitment to evidence, care, and restraint.