We surface. We never send.

Five words did more work than anything else we published this month:

“We surface. We never send.”

Some background: At AI4Love, we released a governance guide this week about AI and email platforms. The guide asks what an intelligence layer should be allowed to do with a nonprofit’s opens, clicks, and sends.

Those signals are relationship data. A comms team earns them through years of steady, thoughtful communication.

So the design question is not, “What is technically possible?”

The better question is, “What should AI never do?”

The answers we committed to:

Read-only. We read engagement alongside giving and volunteering history. We never modify a contact, list, or campaign.

We surface the quiet-but-engaged, people who open regularly but have not given in a while. Staff decide what happens next.

The organization always holds a complete copy of every supporter record and insight. The copy syncs nightly to a file the organization owns outright and survives cancellation.

The design lesson: trust is not a feature you add. Trust is the list of things you commit to never doing, in writing and in public.

What’s the “we never” line in the systems you’re building?