Security and privacy
The short answers come first: what Unidy does with your information, who can see it, and what happens if something goes wrong. The technical details follow, for anyone who wants them.
What you should know before trusting us with your information.
No. We never sell your information or use it to build advertising profiles.
Nothing of yours is shared automatically. You decide what each person can see, and you can change it whenever you want.
Only if you ask them for help, for example to correct a detail you can’t change yourself. Then they open only what that help needs, and every access is recorded in your Audit.
Your data is encrypted with individual keys, kept in a separate system. A copy of the database isn't enough to read it.
Unidy makes a protected copy for the recipient. You decide what they can see and for how long.
Your documents stay protected in Unidy. Sign in from another device and they are all there.
Our team never opens your information on its own. Only if you ask for help, for example to change a detail you can’t change yourself, can they reach what that help needs.
Our staff have no direct access to the servers. The databases and your documents stay encrypted there, and the only way in is Unidy’s own support tool, which opens nothing without your request.
Every access needs a reason, and it’s recorded in your Audit.
Audit
A landlord, a bank or a consulate gets exactly what they need. Nothing more.
You never share the original. Each recipient gets a copy marked with their name.
Choose which pages or details to show. Protect access with a PIN.
Set an end date or a number of openings, or end access whenever you want.
See each opening, the device used and the approximate location. Refused attempts too.
Every system has limits. These are ours, in plain words.
A database or files stolen from Unidy are scrambled on their own. To read even one person’s information, an attacker also needs that person’s key from the separate key vault, and the root key that locks the vault, which is in neither database. That’s far harder than the breaches that leak millions of readable records. Not impossible.
Ending access stops anyone opening the copy through Unidy. Unidy can't take back a copy someone downloaded, printed or photographed.
Unidy lets you share one detail instead of a whole passport. Still, once someone has seen a detail, Unidy can't make them forget it.
Whoever signs in as you sees what you see. That's why your Unidy offers a second step at sign-in.
The technical details
The same protections, with the exact methods, for anyone who wants to check them.
Unidy’s database holds a record for every person with a Unidy account, like you. Every one of those records is encrypted with that person’s own key. So whoever looks inside the database, Unidy’s staff included, sees scrambled characters in place of your personal details and documents.
SELECT name, email, phone FROM customers;| name | phone | |
|---|---|---|
| Maria Garcia | maria.garcia@mail.com | +1 512 555 0142 |
| James Carter | j.carter@mail.com | +1 737 555 0198 |
| Aiko Tanaka | aiko.t@mail.com | +1 512 555 0176 |
| Lucas Silva | lucas.silva@mail.com | +1 512 555 0133 |
Readable by anyone who gets a copy.
SELECT details, email FROM unidys;| details | |
|---|---|
| \x1585e654bf252c0f4bea650fefc7246b324e58d6b5e662826444 | \x5efca5b2257ce1c88a8c044571586eda9bcd |
| \xe208cc9193b73536dd3a40dfc63ba9b090547fa2fbcfb1c3c70b | \xf021f2723bf3e586e7ea11a7869d5b16955e |
| \xfe61cec96dfcf6514fcfaf8c150e5d87ef02c6c946b8fe7a442f | \x35bb10d46a65c02c7400238c7640500fa385 |
| \xa9b5e35a10fc1f12f3b0e90151cbd0e1046e25dc4b4dbbd7d4eb | \x4de403a7f4264d095eb31a7b2e6316d54fe4 |
Scrambled. Each record needs its own person’s key.
Your name, your home address, your phone numbers and your documents are locked with your own key. Your neighbor’s are locked with theirs. Reading everyone would take every person’s key, one by one.
The keys live in a separate key vault, with its own program and its own database. A copy of Unidy’s database holds no key at all.
Every document is stored as a file of scrambled bytes. Even a photo of your pet. Each file has its own key, and that key is locked with yours.
00000000 0c 26 d0 b8 4e fe b3 59 16 04 ef f9 43 ff ec e7 .&..N..Y....C... 00000010 fc f0 86 d4 35 f7 44 cf c5 ca 9c ef 3c 5c 6c 8c ....5.D.....<\l. 00000020 58 29 eb b4 e9 f0 cc 72 06 2e 61 76 f8 ac c6 88 X).....r..av.... 00000030 b6 b7 99 f6 47 e8 cc 4b a2 eb 15 12 27 a0 2f 33 ....G..K....'./3 00000040 f8 f6 a6 6c 45 f2 67 d8 ed cf c4 b1 ba 22 81 5b ...lE.g......".[ …
A data breach at an ordinary company leaks millions of readable records. A copy of Unidy’s database leaks scrambled characters.
Five simple rules for everything you add to your Unidy.
Everything you keep is encrypted with AES-256. Every document has a key of its own.
Each document's key is sealed with your own personal key. There's no master key, so a stolen database isn't everyone's information at once.
The keys live in a separate key vault, with its own program and its own database. The vault is sealed with a root key kept outside both databases: it opens the personal keys, never your information directly. Without those keys, your information is just scrambled text.
Your key is used to show you your information while you're signed in, and to read a new document and draw its thumbnail.
Each time a key is used, the vault writes down when and what for.
Keeping the only key on your phone sounds safer. Until the phone is lost, stolen or replaced.
The honest trade: a service that can show you your documents can read them. So we say it plainly, and every use of a key is recorded.
You don't have to take our word for these.
TLS 1.3 · X25519MLKEM768
Connections to Unidy use a hybrid post-quantum key exchange, designed to protect what travels today from tomorrow's quantum computers. Your browser's developer tools show it.
No outside analytics · No ads
Neither this website nor the Unidy apps have analytics from other companies, ads or tracking scripts. This website also loads nothing from other companies.
Four things
Nothing else.
Unidy runs on Google Cloud and Cloudflare. Documents are stored encrypted in Cloudflare R2, and the keys stay in their own vault.
Unidy Inc.
5900 Balcones Drive, STE 34347, Austin, Texas.
Backed by Conesa Ventures, LLC, a company focused on making a better and safer world for us and our children.
Write to us. We welcome responsible reports and work with you to fix them.
Privacy and security aren't paid extras. Every protection in Unidy is included, free.
Free for good. No credit card.