FACED family registration
Enroll by household — head and members, each with sex, age, relationship, and specific-needs flags. Mirrors the DSWD Family Access Card.
DSWD CCCM · FACED · DROMIC · RA 10173
The evacuation center runs, even at zero bars.
Silong is an offline-first tool for barangay evacuation centers — FACED registration, sex- and age-disaggregated headcounts, a tamper-evident relief ledger, and one-tap DROMIC reports. No server required. No data leaves the device unless you choose.
0 bars works fully offline
AES-256 encrypted at rest
0 trackers or third-party calls
1 file no install, no lock-in
Why offline-first
Disasters take out the network exactly when you need it.
Cloud tools fail under surge load, and a covered court rarely has signal. Silong keeps the whole workflow on the device, so intake and relief never wait for a connection — and evacuees' personal data isn't sitting on an internet-facing server.
Built for the field
Runs on any phone or tablet a volunteer already has. No accounts to create, no setup under a tarp in the rain.
Non-critical by design
The optional central server is a convenience, never a dependency. If it's down, the center keeps operating.
Capabilities
Everything an evacuation center actually needs — in one screen.
From the first family through the door to the situation report that goes up the chain, the whole CCCM workflow is covered.
SADD & PWSN at a glance
Automatic sex- and age-disaggregated tallies plus persons-with-specific-needs counts, ready for IDP protection and reporting.
Tamper-evident relief ledger
Every release is fingerprinted into a hash-chained record. Edits, deletions, and re-orderings are detectable — no quiet double-issue.
See how it's proven →DROMIC report in one tap
Generates the situation-report structure for OCD/NDRRMC — print it on the spot or export, with a ledger-integrity attestation line.
QR Family Access Cards
Printable cards with a scannable code. The built-in camera scanner pulls up a household in seconds at the relief line.
Duplicate detection
Flags likely double registrations before they're saved — so no household is counted, or served, twice across a busy intake desk.
Multi-device, no internet
Several volunteers register in parallel. Merge consolidates by FAC number over AirDrop, Quick Share, or Bluetooth — convergent and double-safe.
Installable & auto-updating
Add it to the home screen. It runs offline after first load and updates itself when online — so every device stays on the same version.
Optional WordPress home base
When you have signal, sync to a central dashboard that rolls up many centers for the C/MSWDO → DSWD → OCD chain. Entirely optional.
Security, demonstrably
Security isn't a badge we printed. It's the architecture — and you can test it.
The relief ledger is tamper-evident because every entry is content-addressed: its ID is a SHA-256 fingerprint of its own contents. Change a single field and the fingerprint no longer matches. Try it below — this runs real SHA-256 in your browser.
Distribution ledger · live
✓ verified
| Family (FAC) | Batch | Qty | Fingerprint |
|---|
Nudge any quantity. The edited row's fingerprint stops matching what was recorded — and the badge flips to altered.
Why this matters in a relief line
Relief diversion is a real, documented problem in disaster response. A ledger you can silently edit is worthless for accountability. With content-addressing, any change to a recorded release is detectable — and each device keeps its own hash chain, so deletions and re-orderings show up too.
Edits are caught instantlyThe fingerprint is the entry's identity. New content → new fingerprint → mismatch.
It survives the serverThe optional WordPress home base re-verifies every fingerprint on ingest, using the exact same algorithm.
No mining, no blockchainThis is a trust hierarchy — your own staff — so the goal is a tamper-evident audit trail, not trustless consensus.
Offline by default
Data lives on the device, not an internet-facing server. The only network call is a sync you start yourself — so there's almost no attack surface to begin with.
Encrypted at rest
An optional passphrase or PIN derives a key with PBKDF2 (SHA-256, 200,000 iterations) and encrypts records with AES-256-GCM. Idle auto-lock; a lock screen guards reopen.
Tamper-evident by design
Content-addressed, hash-chained relief records expose edits, deletions, and reordering — with a verification badge built into the app and the report.
No trackers, no telemetry
No analytics, no ads, no third-party scripts. The app never phones home. (Neither does this website — view source and check.)
Hardened optional server
If you deploy the home base: HTTPS-enforced sync, constant-time key checks, AES-256-GCM PII encryption at rest, and per-entry fingerprint verification on ingest.
Verifiable, not opaque
It's a single readable file with no build step and no hidden dependencies. The integrity guarantee is checked by self-tests — including PHP↔JavaScript fingerprint parity.
encryption_at_restAES-256-GCM
key_derivationPBKDF2 · SHA-256 · 200k
ledger_integritySHA-256 hash chain
sync_transportHTTPS / TLS (optional)
server_authconstant-time key compare
telemetrynone
third_party_depsnone
data_residencyon-device by default
What we don't claim
- Tamper-evident, not tamper-proof. Alterations are detectable; full non-repudiation (per-device signatures) is on the roadmap, not shipped today.
- You remain the data controller. Under RA 10173, the deploying office is responsible for HTTPS, access control, retention, and breach response on any server.
- Alignment, not certification. Silong is built to DSWD and NPC standards. It is not a government endorsement, and it doesn't replace your office's own validated procedures.
Built to the frameworks you report against
Speaks the language of DSWD, OCD, and the Privacy Commission.
Registration, headcounts, distribution, and reporting map to the standards your office already uses — so the output is something you can actually file.
CCCM
Camp Coordination & Camp Management
The whole tool is organized around DSWD's CCCM workflow for managed evacuation sites.
FACED
Family Access Card
Intake mirrors the Family Access Card in Emergencies and Disasters, keyed to a unique FAC number.
DROMIC
Situation reporting
Output follows the DROMIC situation-report structure for the OCD/NDRRMC chain.
SADD
Disaggregated data
Sex- and age-disaggregated headcounts are produced automatically from intake.
PWSN
Specific needs
Persons with specific needs — PWD, elderly, pregnant, and more — are flagged for protection.
RA 10173
Data Privacy Act
Designed around the obligations of handling displaced persons' personal and sensitive data.
How it works
Four steps, from the door to the situation report.
Register offline
Open the app on any phone or tablet. Enroll households as they arrive — no signal needed.
Coordinate on-site
Track headcounts, specific needs, and relief releases. Issue and scan QR access cards at the line.
Sync when there's signal
Merge devices peer-to-peer, or push to the central dashboard. Same data, no double-counting.
Report to DROMIC
Generate the situation report for OCD/NDRRMC and print or export — with a ledger-integrity attestation.
Privacy by design
Vulnerable people's data, handled with care.
Silong stores personal data locally, lets you encrypt it at rest, and never shares it without your action. Read exactly what's collected, how it's secured, and the rights of data subjects under the Data Privacy Act.
Questions
The things people ask first.
Does it need internet?+
No. Registration, headcounts, relief tracking, and DROMIC reports all work fully offline. Syncing between devices or to a central server is optional and only happens when you choose to do it.
Where is evacuees' data stored?+
On the device, in the browser's durable storage — and you can protect it with a passphrase so it's encrypted at rest (AES-256-GCM). It leaves the device only when you sync, and even then you control where it goes.
How do I know the relief records weren't altered?+
Each release is fingerprinted with SHA-256 and chained per device. The app shows a verification badge, the DROMIC report carries an integrity line, and the optional server re-checks every fingerprint on ingest. Try the live demo in the security section.
What does it cost, and is there lock-in?+
It's free to run — no license, no account to create, and no proprietary backend you're tied to. You host the web app yourself, and your data stays as plain JSON you can export at any time.
Can several volunteers use it at once?+
Yes. Multiple devices register in parallel and merge by FAC number — over AirDrop, Quick Share, or Bluetooth — so no household is counted twice, with or without a server.
How is children's data handled?+
Records of unaccompanied or separated children are sensitive and treated with extra care. The privacy policy covers data minimization and protection for minors and other vulnerable persons.
Get started
Put it on a phone before the next storm.
Open it as a web app in any browser, or install it as an Android app — works online or off. Host it over HTTPS to sync across a whole municipality.
Installable Android app · No sign-up · No external requests · Works fully offline