Security

Client-side fingerprinting

SHA-256 hashes are computed in your browser. In hash-only mode, your file content never reaches our servers.

Digital signatures

Certificates are signed with Ed25519, a modern elliptic-curve signature scheme. The private key is held only on the server and never exposed to browsers; the public key is published for independent verification.

Trusted time

Issuance time is taken from the server's NTP-synchronised clock in UTC and shown alongside Indian Standard Time.

Tamper-evident storage

Evidence records are append-only. A hash-chained audit log makes any modification detectable.

Account & data protection

• Encrypted connections (TLS) everywhere
• Row-level access control — only you can see your private records
• Stored files kept in a private, access-controlled vault
• Optional Google sign-in and secure password reset

Reporting a vulnerability

Please report security issues responsibly to support@nceb.n1x.in. We respond promptly and credit researchers who help keep N1X safe.