One email, one password. We send a verification link before anything else.
Avoid anything you use elsewhere.
Privacy by default — individual RRIS answers stay private; only de-identified aggregates surface.