The "Warrant-Proof" Encryption

If a government agency hands Google a warrant for your Drive files, Google must comply. They have the keys. They decrypt the data and hand it over.

If they hand us a warrant, we hand them... salt. Random noise. Encrypted blobs.

Because we use client-side encryption (AES-256), we literally do not possess the ability to decrypt your file. We cannot comply with a decryption order because mathematics prevents us from doing so.

Trust Math, Not Companies

We could be the most honest company in the world. Or we could be evil. Or we could be compromised by the NSA.

With client-side encryption, it doesn't matter. You don't have to trust our character; you only have to trust the open-source encryption libraries we use. The architecture enforces privacy, not the privacy policy.