GuardNILCompliance & SafetyCompliance & Safety Hub
Builtwithchildren'sprivacyatthecenter.
GuardNIL is a family financial-literacy platform — not a bank, not a money transmitter, and not an NIL marketplace. We collect what we need, share with whom we've disclosed, and delete on request. This page is the parent-facing account of how, for what we run today.
The 60-second read
What this page is — and how to use it.
A single source of truth for parents, counsel, partners, and regulators on how GuardNIL handles children's data. The tabs below are the public account of what we do today, not a map of the repository.
What we are
A family financial-literacy platform. Parents fund a simulated NIL allowance for their athlete. The athlete completes goals; the parent approves payouts. We are a technology platform — not a bank, not FDIC-insured, not a money transmitter, and not an NIL marketplace.
Who we serve
Families with athletes ages 8–17. Athletes under 13 do not have direct logins — parents enter their data and view their dashboard through the parent account.
The seven invariants we keep
- No PII collected from a child under 13 without verifiable parental consent.
- Every consent grant is logged with IP, user-agent, timestamp, version.
- Every AI text output is screened by our sensitivity classifier before display.
- Coach communications route through parents only.
- Right-to-delete completes within 30 days.
- The audit log is append-only to every signed-in user, and exported nightly to a separate private bucket so tampering is detectable.
- Funds never leave Stripe's licensed umbrella.
Where we are today
- Code maturity
- ~93% — playbook §3 implemented
- Lawyer-reviewed
- V1 placeholders, engagement target 2026-06-15
- COPPA Safe Harbor
- Q3 2026 — kidSAFE or ESRB
- SOC 2 Type I
- Pre-Q1 2027
- Designated security personnel
- Galen Oakes — privacy@guardnilu.com
What changed in May 2026
Four independent audit passes (Momus + Metis on Opus, parallel runs) took us from 75% → 84% → 88% → 92% → ~93% over 36 hours. Each pass surfaced specific wiring gaps; each remediation closed them with file:line evidence.
What we don't claim
We don't claim "COPPA-compliant from day one." We don't claim AI moderation we haven't shipped. Our marketing does not promise real money to athletes. Every disclaimer the FTC cited in the NGL settlement informs what we say in public.
What we still need
Counsel-reviewed legal pages, COPPA Safe Harbor membership, cyber insurance, and a third-party background-check vendor for coaches. All are tracked in the Roadmap tab with deadlines and owners.