Basic organization guide

Meet with a group of trusted colleagues who share your concerns. Some have chosen to make their names public on neveragain.tech.
Copy the questions below into a safe space for collaborative writing. We recommend the Riseup.net Etherpad, since they do not store IP addresses, require https, and destroy pads after 30 days of inactivity.
Discuss the questions and write down answers in your shared document.

Who are your users or customers? Do they include any groups at risk under the current US presidential administration?
In what ways can your products or services be used to facilitate the creation of databases of identifying information that may be used by the US government to target vulnerable populations?
What are the secondary effects of your org’s product and design decisions? What groups are impacted most by them? (e.g. requiring real names, implementing design decisions that amplify confrontational behavior among users)
What incentives does your product or service create for third parties? Are those incentives harmful or helpful?
Which of those incentives can you change or influence?

Read your organization’s Terms of Service, user privacy policy, EULA, and any other user agreements or related documentation. Document links here.
Has your organization received requests for user information from the US government? If so, what is your policy on handling them? Have you made any public statements or made user-facing documentation available about this policy?
Does your organization comply with the Privacy Shield framework?

Does your organization have an employee ethics hotline, compliance violation reporting mechanism, or policy on whistleblowing?
Are there “moral canaries” in your organization? These are people whose statements or actions (especially drastic ones, like quitting) you perceive as important indicators of the moral health of your organization.
Who are the key decision makers or influencers in critical departments or areas of your organization and what is the best way to communicate with each of them? (e.g. Legal, Security, Engineering, Product/Product Management, Design, Customer Support)
Have any employees in your organization unionized?

Has your organization made a public or private statement in response to threats from the US presidential administration?
Has any member of your organization’s leadership met with the incoming US presidential administration?
If your company is investor-funded, who are your investors? Have they made a private or public statement in response to threats from the US presidential administration?
Who is on your organization’s board of directors? Have they taken any actions or made any public statements regarding the US presidential administration’s threats?