One break-in should never expose all your information.

What you can check for yourself

You do not have to take our word for these.

• The connection to this site uses hybrid post-quantum key exchange (TLS 1.3 with X25519MLKEM768), designed to protect traffic captured today against decryption by a future quantum computer.
• No analytics, no advertising, no tracking scripts, and nothing loaded from another company’s servers.
• Signing up keeps your email address, what your browser said about itself, and the address the request came from. Nothing else.

How Unidy protects what you keep

One key per person. Each person’s information is encrypted with a key of their own. A stolen copy of the database is not one breach of everybody: it is a separate lock for every person, and there is no master key whose compromise exposes every Unidy.

Keys kept away from the data. The encrypted information lives on one system and the keys on another, each with its own credentials, network rules and audit log. Each is designed to be useless on its own: a stolen database holds scrambled text without keys, and a breached key vault holds keys without the data they open.

Built for the next computer. Information stolen today can be kept until a machine exists that opens it. So keys are wrapped with ML-KEM-768, a post-quantum algorithm, together with a classical one, so that an attacker would have to break both.

Decryption only while you are signed in. During your session the service asks the vault for your key alone, uses it in memory to decrypt what you asked to see, and sends that to your screen. It is designed so that nothing readable is written to disk, caches or logs.

Prove a document is genuine

When you need it, tap Authenticate and an independent identity-verification service checks that a document is original and authentic. It costs a small fee, shown before you confirm, and that service sees the document only with your consent.

From then on, every copy you share says so: the person who receives it knows the document behind it was authenticated, when and how, not just that a scan was uploaded. If your passport has a chip, your phone can check the chip for free.

Why we hold the keys, and not your phone

Putting the only key on your device sounds stronger, and for a moment it is. Then the phone is lost, stolen, dropped or replaced, and everything it held is gone for good, with nobody able to help.

So we hold the keys and keep them apart from what they open. It is an honest trade, and you should know which side of it you are on: you are protected against the breaches that actually happen to companies, and you do not lose your life’s paperwork with a phone. What you do not get is a guarantee that we could never read anything, because a service that can show you your documents can read them.

What this does not protect you from

No system should claim otherwise, so here is the boundary in plain words.

• An attacker with live control of both the service and the key vault at once. The design makes that much harder, not impossible.
• A copy somebody already downloaded. Ending access stops future viewing through Unidy; it cannot reach into anyone’s computer.
• Anything you choose to share. Unidy can make sure you share one field instead of a whole passport, but what you disclose is disclosed.
• Your own sign-in, if somebody else has it. That is why your Unidy offers a second step at sign-in.

Reporting a problem

If you find a security weakness, write to security@unidy.com. We welcome responsible reports and will work with you to investigate and resolve the issue.