Philosophy & Rights
Measure to protect, not to surveil
Verlumia is born of a conviction: civic knowledge is a right, not a privilege. We measure the cyber-risk citizens face to defend them — never to watch them.
Why we exist
The name says it: Verlumia, from veritas (truth) and lumen (light). Without a reliable measurement of cyber-risk there is no fair insurance, no evidence-based public policy, and no citizen able to make informed decisions. To produce that measured truth —reproducible, neutral, auditable— and put it in plain sight of everyone is, before it is a product, a civic act.
Measure ≠ surveil
It is the line we do not cross, and it is worth being explicit about it. To surveil is to observe a person: to accumulate their trail, profile them, decide about them. To measure, as Verlumia does, is to count an aggregate, system-level phenomenon —how many fraud reports in a country, the prevalence of cyberbullying in a survey— without collecting or assessing data about any individual.
By design, the public index never scores a person or a company: it measures countries and citizen phenomena. That neutrality is not a courtesy — it is structural, and it is the same discipline that protects the data from any funder. The truth we publish illuminates the problem; it never shines a light on the person.
The Charter of Digital Rights
Verlumia's ethical foundation is the Charter of Digital Rights and Citizen Cybersecurity, a conceptual framework —authored by the founder, with regional scope— that places the person, and not the control apparatus, at the center of the system. It does not compete with existing laws or initiatives: it covers the gap they leave, that of the rights of the citizen and their family. Three ideas sustain it:
Not a separate entity nor a creation of the state: it is the same person as they exist and act in digital environments. Their dignity extends equally to their identity, their data, their behavior and the profile others infer about them.
Digital harm is not always individual: there is shared data, intimate violence and harm to entire communities. The Charter names what the individualist approach does not see.
Rights are born in the person and project outward, never the reverse. Society's security can never be invoked to dissolve the person. This is what separates protecting from surveilling.
The Charter distinguishes the protected subjects (the person, the family, society) from the obligated actors (the state and companies): the latter bear obligations; they do not hold the rights of the former.
Nine guiding principles
- Centrality of the person. Digital security is a guarantee of rights; dignity extends fully across a person's entire digital existence.
- Non-subordination. Rights are born in the person and are not subordinated to the family or to society.
- Security without surveillance. Privacy and security are built together, not one at the cost of the other.
- Reinforced protection. Children, older people, people with disabilities, indigenous people and migrants; the school as a safeguard.
- Relational and collective harm. It names the shared harms the individualist approach fails to notice.
- Identity under custody, not ownership. Identity —including biometric identity— belongs to the person; the state and private parties are its custodians.
- No reduction to a profile. The right to know, contest and not be defined by an algorithmic profile.
- Accountable authority. Every measure is proportional, minimal and subject to public scrutiny.
- Resilience and regional vocation. Critical infrastructure is protected; the Charter interoperates with the region's legal frameworks.
Document in development. The Charter is a conceptual, pre-legislative framework, under legal review — it is not currently binding law or regulation, nor legal advice. It is published here as Verlumia's ethical foundation; its articles and scope evolve in phases.
How it becomes practice
This stance does not stay on paper: it is put into practice through the five guiding principles that govern every figure. "Measure to protect, not to surveil" is structural neutrality (principle 4) turned into method; "truth is proven, not proclaimed" is auditability (principle 3). The Charter's principles and the index's principles are the same ethic, seen from two sides: one looks at the citizen, the other at the data.
This is living doctrine: a stance that will evolve with society, technology and generations. Today's version is an honest starting point, not an eternal law — and that is how we want it read ten years from now.