SALLYPORT Rules of Engagement

1. Observe and report. SALLYPORT investigators gather facts from lawful sources and hand them to law enforcement. Investigators do not arrest, detain, confront, rescue, or make contact with a suspected victim or suspect unless a law enforcement agency has asked for it in writing.

2. Licensed work only. Every investigator works under a current private investigator license in each state where the work happens, carries current errors-and-omissions insurance, and has passed the SALLYPORT background check. Work outside a licensed state is not allowed.

3. Children: hard stop. When any fact suggests a person under 18 is being exploited, the investigator stops collecting content at once. The investigator does not view, download, purchase, screenshot, forward or store any image or video of a child. The investigator records only the link, username, platform and time, and files a report with the NCMEC CyberTipline before doing anything else. The CyberTipline report number goes into the case.

4. No purchases of exploitative content. Paying for content from any account suspected of trafficking sends money to the trafficker. A purchase is only allowed for a suspected adult trafficking case, only when a law enforcement agency has asked for it in writing, only on a SALLYPORT-approved case budget, and never when a minor may be involved.

5. No pretext that breaks the law. Investigators do not impersonate law enforcement, do not obtain phone, bank, or medical records by pretext, do not access any account without permission, and do not use any technique that is illegal in the state where they work.

6. One lead agency. Each case goes to one lead law enforcement agency. Sending the same case to several agencies at once can expose an investigation already underway. The only addition is the NCMEC CyberTipline, which receives every case involving a minor.

7. Deconflict first. Before working an identifier, the investigator checks it against SALLYPORT. When another case already holds it, the two lead investigators talk before either one acts.

8. Chain of custody. Every piece of evidence is logged in SALLYPORT the day it is collected, with its source, time and fingerprint (SHA-256). Nothing is altered after logging. Corrections are made as new entries.

9. Confidentiality. Case facts stay inside SALLYPORT and the lead agency. Investigators do not post, publish, or discuss case facts with media, family, or on social platforms.

10. Survivor dignity. Survivors are described with respect, by role and not by worst moment. Their location and identity are never shared outside the case team and the lead agency.

11. Use of force. SALLYPORT investigators carry out no use of force as part of SALLYPORT work.

12. Breach. Breaking any rule ends access to SALLYPORT. SALLYPORT reports conduct that may be unlawful to the appropriate licensing board and agency.