How the evidence is measured, recorded, and protected.

The Method

We measure real-world evidence from people who already use a product. Each person reports their outcomes against their own baseline. We model those reports into an Ēnel Index with a 95 percent credible interval, and we record the number of reports as n. You get one number and the uncertainty around it, not a claim. An entry reaches validated when its interval separates from no effect and the reporting population is large enough. Until then it reads in progress. When the estimate does not separate from no effect, we mark it null and publish it anyway. Absence is a finding. We report the non-responders. We do not round the uncertainty away. What you read is the whole picture, including where a product did nothing.

The Separation Rule

The verification layer is the verdict: clinical, plain, and un-persuasive on purpose. It states the method and the number, nothing more. The experience layer is everything around it, warm and human and alive. The split protects the number you rely on. Marketing may surround the verdict. Marketing never touches it.

What the Badge Means

The validated badge is a notary, not a judge. It attests that an entry was measured against a defined protocol, reached the threshold, and is recorded with its Ēnel Index and credible interval. When you see it, you know exactly what was checked. It is an efficacy attestation. It is not medical advice, and it is not a recommendation to take anything. That decision stays with you and your physician.

Editorial Independence

No brand pays for a verdict, places one, or edits one. What moves the number is data and nothing else. The record is append-only. A published result cannot be removed, and a correction appends rather than overwrites. Nothing you read was quietly deleted or rewritten to look better.

Consent

You report only what you already do. Participation is observational. Ēnel does not supply, prescribe, or sell you anything, and nothing here replaces your physician. You choose what to share, and you can withdraw at any time. Contribution is closed to anyone pregnant, under 18, or in active cancer treatment. That exclusion is a rule, not a suggestion, and it is checked before the first question is asked.

The two-database model

Identity and evidence are held apart. One database holds who you are: your name, your contact information, your consent record. A separate database holds what was measured: the protocol, the dose, the outcome. The two are linked only through a one-way reference, never a shared identifier. This is the architecture, not a policy that could be revised in a later meeting. An evidence record cannot be walked back to a person, because the system that stores the evidence was never given the means to do it.

SHA-256 one-way hash

The reference between the two databases is a SHA-256 hash. A hash runs in one direction only. Your identity can produce the hash, but the hash cannot be reversed to reproduce your identity, not by us, not by anyone who obtains it. The evidence side never stores your name or any identifying field, only the hash. Take the evidence database on its own, and there is no record in it that says who took what.

The five absolute prohibitions

Five commitments sit above every other decision Ēnel makes, including the profitable ones.

1. We never sell your personal data.
2. We never share it with insurers.
3. We never share it with employers.
4. We never share it with law enforcement, except where compelled by a valid legal order, which we publish in the record.
5. We never let a brand buy, place, or edit a verdict.

The refusals charter

These five are not a policy page. They are the standard the method is measured against. When we are asked to cross one, by an investor, a partner, or a brand whose product scored poorly, the answer is no, and the request is entered into the record: what was asked, by whom, and when. The record is append-only, so that entry does not get quietly removed later. The charter answers to the method, not to whoever is paying that quarter.

No single sign-off

Independent advisors guide how the method is designed and how uncertainty is reported. They do not vote on any single verdict, and no advisor’s name sits beside a result. No brand, no advisor, and no one person signs off on a badge alone. The badge answers to the method, not to a signature.