Every dossier, photograph, and message moves through end-to-end encrypted infrastructure. No third party holds keys. No metadata is retained beyond the transaction.
TLS 1.3 with pinned certificates. Forward secrecy on every session.
AES-256-GCM at rest. Per-dossier keys. Hardware-backed key custody in Zug.
PGP exchange or Signal verification on first contact. No SMS, no consumer email.
Correspondence purged 90 days post-transaction. Dossier access revoked on close.
PGP Fingerprint
4F2A 9C81 D3E7 6B05 1A8C 9E4D 7F23 B610 8845 C2F9
Signal
Issued upon verification
Audit
SOC 2 Type II · ISO 27001