Sharekey is a collaboration platform where all data is encrypted, and only Sharekey users have access to their encryption keys. This makes Sharekey immune to many of the cybersecurity risks that threaten other collaboration applications, such as:

• Password Leaks: Sharekey users’ credentials are managed using Secret Keys that are stored only locally on their devices. If attackers compromise Sharekey’s servers, there is no password hash database to be leaked.
• Data Leaks: All data stored on Sharekey’s servers are encrypted with a key that never leaves the user device. An attacker with access to Sharekey’s servers does not have the ability to access or exfiltrate any readable user data.
• Social Engineering: Sharekey employees have no access to user data or accounts because all data is encrypted with user-controlled keys. This makes social engineering attacks against Sharekey employees ineffective because they lack the ability to access Sharekey user data. The Sharekey Roadmap also includes the implementation of further protections against Man-in-the-Middle (MitM) attacks to eliminate the risk of attacks during the connection creation step on the server side.
• Court-Ordered Disclosure: Social media and collaboration platforms with access to a user’s Secret Keys may be compelled by a court order to turn over user data. Sharekey can’t decrypt user data, making it immune to such orders. Moreover, SHAREKEY Swiss AG being a Swiss company with its servers hosted in Switzerland, all user data is protected by the Swiss Federal Data Protection Act (DPA) and the Swiss Federal Data Protection Ordinance (DPO). These offer some of the strongest privacy protection in the world for both individuals and corporations. As Sharekey is outside of US and EU jurisdiction, only a court order from the Cantonal Court of Zug or the Swiss Federal Supreme Court can compel us to release the extremely limited user information we have.
• Metadata: Sharekey additionally minimises the collection of user metadata, as described in our Privacy Policy and Roadmap. Sharekey also does not employ any user behavior analysis tool or share any data with third parties.
• Physical Device Access: All data stored on a user’s device is encrypted, with the exception of downloaded les opened in another application. This means that an attacker with physical access can only access data if they know the user’s Password or Secret Phrase. As no reliable and superior authentication solutions exist to mitigate such attacks, this is not an attack scenario that Sharekey can effectively protect against, and attempting to do so could result in weaker security, as demonstrated by successful attacks against multiple versions of FaceID and TouchID.

Without encrypting all user data with user-controlled keys, it would be impossible for Sharekey to guarantee protection against all of these potential attack vectors. It is this decision to leave full control of their data in the user’s hands that differentiates Sharekey from other collaboration and social media platforms.

*CloudBlue Fast-Track product: This product is part of the CloudBlue Fast-Track program. This means that the product is in process to be integrated with CloudBlue Connect.