Evidence remains local
The cloud stores encrypted DFA files and random wrapped tier keys. It does not decrypt or index evidence databases.
Security model
Single-use authorization
Each unlock is bound to one archive digest, tier, five-minute device request, and ephemeral desktop key. Grants cannot be replayed in another app session.
Revocation boundary
Revocation blocks future unlocks and current leases end within 30 minutes. No system can retract content already viewed, exported, or photographed.