The HQ privacy boundary in Education: aggregates and roster progress only

CEC & Education, the association-only surface where HQ tracks continuing-education-credit progress across the membership, sits behind the same hard privacy line every other HQ screen sits behind: HQ sees network aggregates and roster standing, never a member business's own private records. This article explains the mechanics behind that line as it applies specifically to Education: why the page can only ever read network-level data, how access to the page itself is restricted to association-type networks, and exactly what that leaves HQ able to see.

Where to find it

In the HQ sidebar, open the Membership group and select CEC & Education. Direct URL: hq.verinode.ai/education. It only appears for association-type HQ accounts; franchise and enterprise HQ accounts do not see this entry in their sidebar at all, for the reason covered below.

For the full walkthrough of what every number and tile on the page means, see CEC & Education: how HQ tracks continuing education across the network. This article covers the privacy and access mechanics underneath that page, not its layout.

Why Education can only ever read network-level data

Every HQ surface, Education included, is built to read from exactly one place: a network-level store that holds your association's own roster, its published course catalog, and the credit records logged against your members. That is a structurally separate destination from where an individual operator's private business records live, the inbox correspondence, invoices, and job files that Verinode IQ reads for that operator alone.

The Education page does not choose, at query time, whether to read the network-level store or an operator's private one and then apply a permission check to decide which is allowed. It only knows how to talk to the network-level store in the first place. There is no code path inside Education that is capable of reaching into an individual member's private account data, even in principle, because the connection the page's queries run through was never built to open one. Every read behind the roster count, the credit totals, and the course catalog goes out on that same network-level connection, and nothing in Education's data pull ever touches an operator's own account.

That is also why Education never shows anything that looks like an individual member's underlying financials, job records, or day-to-day operations. The page has nothing to draw on but the roster, the catalog, and the credit ledger. It cannot leak what it cannot reach.

How the CEC & Education capability gates access

CEC & Education is one of a handful of HQ surfaces (alongside Member Directory, Dues & Renewal, Events, and membership growth tools) that only associations get. Franchise networks and single-enterprise networks run continuing-education requirements differently, if at all, so the capability that unlocks this page is granted to association-type networks only.

That access decision happens in two layers, so a hidden sidebar link is never the only thing standing between a franchise HQ account and this page:

1. 1The sidebar hides the entry entirely. If your network isn't association-type, CEC & Education never renders in your Membership group, the same as it never renders for any franchise or enterprise HQ account. There's nothing to click, disabled or otherwise.
2. 2The page itself checks on every load. Before the page renders anything, it resolves your signed-in network's type from your session and confirms the CEC & Education capability is actually granted to that type. If it isn't, the page responds as though the URL doesn't exist at all, not a blocked-access message, not a partial view with numbers blurred out. This catches a bookmarked or directly-typed link reaching a surface the sidebar was already keeping out of sight.
3. 3Only once both checks pass does the page fetch anything. The roster, catalog, and credit-total reads described above only run after your network's access to the capability is confirmed, scoped to your own association's roster and nobody else's.

What HQ actually sees

Once both checks above pass, Education pulls together exactly three things, all scoped to your own association and nobody else's:

• Total CEC credits awarded across the membership so far in the current calendar-year cycle, alongside how many member businesses have logged at least one credit versus your total roster size.
• Roster standing per member business: how many credits each member has earned this cycle against the shared target, sorted furthest-behind first, so you can see at a glance who needs a nudge.
• The active course catalog: what's currently published, each course's credit value and category.

That's the entire surface. There is no per-member financial figure, no job or claims data, no correspondence, nothing that resembles an individual member's private business operations anywhere on this page. Education is, by construction, the narrowest kind of HQ surface: a roster of names, a shared credit ledger, and a course list, nothing else flows through it.

What Education never shows, regardless of your account or tier

• No individual member's underlying financial or operational data. Education has no route to reach it, as explained above, so there's nothing to gate even if the capability check were somehow bypassed.
• No data from any other association, franchise, or enterprise network on Verinode. The roster, catalog, and credit reads are scoped to your own network's identifier alone; nothing here is a cross-network comparison. (Peer benchmarking across networks lives on Benchmarks, an entirely separate surface with its own anonymity floor, covered in What HQ sees, the network privacy boundary.)
• No franchise or enterprise view of this page at all. The capability gate means this entire surface, aggregates included, simply does not exist for a network type it wasn't built for.

Empty states

Education degrades gracefully rather than showing a broken screen when there isn't yet enough data to summarize:

• No members on the roster yet: "No members yet" (status pill), with summary text "Education data will appear as members are added to the roster and courses are published."
• No roster or credit data recorded: "Member CEC progress will appear as the roster and credits are recorded."
• Every member has met the cycle target: "Every roster member has met the CEC target for this cycle."
• No active courses published: "Courses will appear here as the association publishes its CEC catalog."

None of these are errors. They are the honest state of "nothing recorded yet," and every one fills in on its own as your roster, credits, and course catalog are populated, no action required to unlock them.

Related help

• CEC & Education: how HQ tracks continuing education across the network for the full page walkthrough, every label and number explained.
• What HQ sees, the network privacy boundary for how the same aggregates-only rule applies across Network Health and Benchmarks.
• Member Directory: your association roster in Verinode HQ for the roster that Education's member list is drawn from.
• Dues & Renewal: tracking membership billing status for the other association-only capability gated the same way.