Security.

Plain facts about the security controls Encypher runs, and where they stop.

Control boundaries.

Our systems: Encypher protects the systems it runs with access controls, encryption, and audit logs.
Admin access: Admin access is limited to a set purpose.
Outside our systems: Keys you control, outside providers, and production backups follow their own written terms.

Provenance limits.

Four of the five answers a provenance check can give: Verified, Modified after signing, Issuer not recognized, and No provenance found. The fifth is Could not verify. — A check reports who signed and whether the content changed. It never says whether the content is true.
C2PA Trust List
Hard binding
Validation status code

What it shows: Provenance helps a verifier check who signed content and whether it changed.
What it does not: It does not prove that the content is true, legal, or admissible in court.
Our claims: We make assurance or certification claims only when they link to approved evidence in the document registry.

Create. Mark. Endure.

Found a security issue? Tell us through our contact page. Do not include credentials, private keys, or personal data you do not need to share.

Report a concern Trust page