Security starts with transparency.
UnoLock is built on zero-knowledge, post-quantum encryption with a coercion-resistant architecture. Every design decision is documented, every threat modeled, and every control mapped to a real adversary. This hub is your central resource for understanding how we protect your data.
Zero-knowledge includes user-provided metadata. Names, labels, descriptions, Space names, and message metadata are client-encrypted; server-held data is limited to the operational control data needed to run the service.
- Trust Center SOC 2-aligned audit preparation, controlled access boundaries, and public trust package
- Security Overview Architecture, encryption, and defensive design
- Threat Model Adversaries, assets, mitigations, and residual risks
- Technical Details Cryptographic internals and protocol specifications
- Transparency Openness about how UnoLock operates and what we can't see
- Vulnerability Policy How we handle vulnerability reports and coordinated disclosure
- Bug Bounty Rewards for responsible security research
- Client Source Access Request client-side source access for review or diligence