Security

Internally tested, not independently audited.

That line is the honest state of every privacy property on this site. The documentation below is what we hand to design partners so they can check the work themselves.

The documentation pack

Threat models

Who we assume is trying to read your material, what they can reach, and what each control is meant to stop.

Specification set

The written design of transient inference, customer-held key encryption, and confidential-computing routing.

Test evidence

The internal test results that exercise the specifications, with dates and the version they were run against.

Formal model-checking results

Machine-checked models of the protocol logic and what properties they were checked for.

Data inventory

Every place data can exist, for how long, and under whose keys.

The pack's cover page carries the same line as the top of this page. If an independent review is ever completed, its materials would be added to the pack and this page would say so.