Trust you can verify

What we promise

• Data minimisation. We collect only what the action you asked for requires, and keep it only as long as needed.
• Encryption by default. In transit and at rest, with nothing for you to configure.
• Control over what reaches the AI. The user sees what goes to processing and what does not, and decides.
• Official messages you can trust. Verified sender, approved wording and proof of delivery, with no free links.

The transparency log

When the official channel launches, every verified sender, approved wording and delivery will be recorded in a signed, tamper-evident log, anchored daily with an external party and open to everyone, no account needed. Anyone who receives an official message will be able to check, with a short code printed in it, who sent it, which wording was approved and when it was delivered.

What will never enter the log: message content, recipient identities, any personal data. The log attests to authenticity, not content.

Where the data lives

Data is stored on OVHcloud servers with encrypted backups and a tested recovery procedure. For bodies that require storage in Israel we offer a dedicated deployment on an Israeli cloud, running the same core software.

Compliance

• Israel's Privacy Protection Law, Amendment 13. A privacy policy, explicit consent for processing, and a privacy check on every change before it reaches users.
• Responsible AI. Users know when they are talking to an AI and what happens to their data.
• Accessibility. The site and the products are built on accessibility principles. Details in the accessibility statement.

Reporting a security issue

Found something? Write to us through the contact page with the word "security" at the start of your message. We acknowledge within one business day and will not take legal action against good-faith reporters.

What is coming

Documented operating procedures towards ISO 27001, an Israeli storage region, and the transparency log. We will update this page as each goes live.