Libraries need exclusion rules
A journey evidence library for a school should hold accepted portfolios, workshop plans, blank brief templates, and debrief notes. It should not hold original passports, medical forms, or images of host children. Access should be limited. Retention should be finite. Until a lawyer writes your policy, be stricter than you want to be.
Tag files by year and route (teaching vs combined) so you can see whether the water option made teaching worse. That is evaluation data. Store source PDFs for staff, not for student social media.
Templates to keep
Readiness sheet, role sheet, hour log, parent question list, safeguarding incident blank. That is a library. A drive named “Bali memories” is not.
The resource library page points humans; this article points archivists. Both are needed if a trip is to survive staff turnover.
Index fields
Year, route, lodging type, incident flag (Y/N), water option (Y/N), faculty owner. That index lets you learn. A library without an index is a drawer. Drawers hide both excellence and harm.
Student access
Students get their own portfolio, not everyone else’s. Libraries that are open by link will leak. Use school permissions. If you cannot, keep paper.
What an evidence library is for when staff turn over
Service trips die when the only person who remembers the rules leaves the school. An evidence library is how a new coordinator, opening a drive in 2027, can see that last year’s cohort taught six hours, used a volunteer house, had zero photo incidents, and decided not to offer diving because Tuesday teaching suffered. Without that file, the new coordinator will rebuild a poster and call it tradition. journer.org can supply templates; it cannot sit in your faculty meeting. The library is the meeting you leave behind.
Index every accepted portfolio by year, route, lodging type, and incident flag. Keep a blank incident form even for quiet years so people remember that silence is data. Store the source itinerary PDF for staff next to the HTML links, because websites move and attachments wander. Do not store children’s faces “in case we need them for the gala.” Galas are not a lawful or ethical reason. If a board member asks for a video of kids, give them the ethics page and a student presentation about a lesson brief instead.
Access control is part of the library. A link that anyone with the URL can open will eventually land in a family WhatsApp and then on a public feed. Use the school’s permissioned drive. If the school has no such drive, keep paper in a locked cabinet and scan only redacted hour logs. Analog is not a failure of modernity. It is a way of not leaking. When you destroy files, destroy them on a date you wrote in the policy, and write that you did it. Libraries that never delete become hoards, and hoards are how harm travels in time.
Students should know the library exists so they do not invent a parallel Instagram archive. Tell them in the workshop: the official record is the portfolio; social media is not a backup. If they want a copy of their own brief after graduation, export it redacted. That single sentence prevents a lot of ghost folders on personal laptops with names of children still in the filenames.
Libraries and subpoenas you hope never come
If someone ever asks what happened in a classroom, you will want a small, clean file, not a swamp of images. That is an unromantic reason to keep hour logs and to delete faces. Design the library as if a serious adult might have to read it in a hurry. They should find times, adults, and rules, not a montage.
Train more than one faculty member on where the library lives. Single-person archives vanish on sabbatical. Vanishing is not a privacy method; it is negligence.
Write a destruction log. Future you will thank present you for being boring.