Read the code.
The code that runs in your browser and on our servers, the specification it follows, and the list of every claim this site makes.
You should not have to take our word for what gotin does. The code that seals and opens files runs in your browser, so it is the part you can inspect most directly.
- Everything that touches a file or a key runs in the browser
- The server code never receives a key
- The list of what our server stores will be generated from the schema
The repository
Four things worth reading.
Sealing and opening
Everything that touches a file or a key. Read this part first.
Storage and limits
Stores sealed copies, enforces expiry and rate limits, and sends email. It never receives a key.
The database schema
The list of what our server stores will be generated from it on every release.
See the listEvery claim on this site is on a list.
Each sentence about security on this site is recorded in the claims register with its status and the evidence behind it. A sentence about something that is not built yet is marked planned.
Where to go from here.
Questions about the code?
Fifteen minutes on a call, with the people who wrote it.