Encrypted Assignment Dispatch

For Blindeforbundet, encrypted assignment dispatch is mission-critical: coordinators regularly share sensitive patient data (names, addresses, medical records) with peer mentors, and doing so via unencrypted channels creates serious GDPR and data-security risks. The delivery and read-receipt mechanism gives coordinators certainty that sensitive information reached the right person, while the 10-day automatic reminder reduces the risk of follow-up falling through the cracks. This feature directly enables Blindeforbundet to adopt the platform while meeting their legal and operational obligations around sensitive personal data handling at scale without manual coordination overhead.

End-to-end encryption should use asymmetric cryptography (e.g. X25519/ChaCha20-Poly1305 via libsodium or the platform secure enclave), with the peer mentor's public key stored server-side and the private key protected by biometric or device authentication on-device. The server stores only ciphertext and cannot read the payload. Delivery confirmation requires a signed acknowledgement token; read receipts are logged when the decrypted payload is first rendered on-device. The 10-day reminder runs as a server-side background job. Flutter integration uses platform secure storage for key material and the assignment inbox screen for per-assignment status display.