Origin
The sending institution must be identifiable.
Recorded delivery · privacy · evidence
Official correspondence
Sensitive official communications belong in an authenticated inbox. Email, SMS and push notifications serve only as generic alerts and must not carry the official content or expose personal data.
In summary
The essentials
Official correspondence must preserve origin, integrity, timing, version and relevant delivery events. An external channel may alert the user that a message exists, but its content, attachments and any applicable deadline belong in the authenticated environment and at the competent source.
How it works
From the sending authority to the authenticated inbox
01IssuanceThe competent institution produces an identifiable, integrity-protected communication.
02DispatchThe system records dispatch to the recipient’s official channel.
03DeliveryAvailability for delivery is recorded separately from opening.
04AccessThe person accesses content and attachments in the appropriate authenticated environment.
Principles
What makes a document trustworthy
Integrity
The document, its version and evidence of authenticity must be verifiable.
Privacy
Push notifications and email do not carry sensitive official content.
Timing
A deadline is shown only when it has a real legal source.
History
Dispatch, delivery, opening and correction are distinct events.
Appeal
When there is a right to challenge a decision, the appropriate route must be indicated in the competent module.
Representation and source
An alert channel is not the official repository
Separating the alert from the content reduces exposure and preserves an authenticated source for the message, its attachments, versions and delivery events.
In practice
What you should receive outside Sistema Candeia
An external notification may say only that new official correspondence is available. To see who sent it, the subject, attachments, content or any applicable deadline, the person enters the authenticated environment. This reduces leakage through email inboxes, on-screen notifications and external intermediaries.
Limits
Protections and limits
An email notification does not become the “original” correspondence.
Opening a message must not retroactively alter the delivery record.
GOV.CANDEIA does not display a personal inbox, invent messages or simulate a real legal deadline.
Recorded delivery
Notification, delivery and opening are different events
| Event | What it proves | What it must not imply |
|---|---|---|
| External notification | That new correspondence is available. | It does not expose the content or prove that it was read. |
| Delivery to the authenticated inbox | Availability through the corresponding official channel. | It does not automatically constitute legal notice when the law requires an additional condition. |
| Opening | Access to the content through the authenticated channel. | It does not rewrite the delivery history. |
Constitutional basis
Read the full text
Consult the related provisions in the Proposed Constitution.
Continue exploring