AZ AlphaZulu

Trust & security

What we can see,
and what we cannot

Written to be checked against the products rather than to reassure you. Where something is uncomfortable it is stated plainly, including the things our encryption deliberately does not hide.

The short version

  • Analysis runs on your device wherever it can. Alpha Gallery never uploads a photograph to look at it, and there is no cloud AI in that product at all.
  • Alpha Password’s servers hold no readable vault data and never receive your master password, in any form.
  • There are no advertising SDKs, no data brokers and no third-party analytics in any product in the portfolio.
  • We have not had a third-party security audit. When we do, it will be published here with its findings, not summarised.

How Alpha Password is encrypted

The scheme is specified rather than described. Suite AP1 is the normative reference for the Rust vault core and the server alike, and these are its primitives.

Password KDF
Argon2id — m = 64 MiB, t = 3, p = 4
Key derivation
HKDF-SHA-256
Encryption
XChaCha20-Poly1305, 24-byte random nonce
Attachments
crypto_secretstream_xchacha20poly1305
Sharing
HPKE — X25519, HKDF-SHA-256, ChaCha20-Poly1305
Signatures
Ed25519
Authentication
OPAQUE (CFRG), OPRF over ristretto255
Randomness
Operating-system CSPRNG only

The server learns nothing about vault contents: no plaintext, no titles, no web addresses, no one-time-code issuers, no folder names. The vault unlocks offline, with no network round-trip. Every ciphertext carries a suite byte, so the scheme can be replaced without a flag day.

What it deliberately does not protect against

A security page that lists only its strengths is not worth reading. These are the limits we chose, written down where you can hold us to them.

  • Metadata

    The server can see how many items you have, roughly how large each is, and when each last changed. Hiding that costs more than it buys at this stage, so it is not hidden.

  • A hostile app build

    If the application binary itself is malicious, no amount of cryptography in the protocol helps. Reproducible builds are the mitigation, not encryption — and we are not there yet.

  • Quantum computers

    Suite AP1 is not post-quantum. The specification defines how a successor suite is introduced, which is the honest position: a migration path rather than a claim.

  • Losing both keys

    Losing your master password is survivable through a recovery key. Losing the recovery key and the password is not. That is a consequence of the server being unable to read your vault, and it cannot be fixed without removing the property.

  • Breach checking

    Alpha Password does not tell you whether a password has appeared in a breach, because doing so means sending part of it to someone else’s server. We would rather lose the feature.

What each product sends

Alpha Gallery
Scanning is entirely local. Cloud Backup is opt-in and off until you turn it on. Problem reports are written on the phone and sent only when you press Send.
Alpha Password
Encrypted vault records only. No plaintext of any field, and no master password.
Alpha Health
Your own entries, to your own account, so they survive a lost phone.
Alpha Wealth
Entries and the documents attached to them, shared between the owner and the bookkeeper they invited — and nobody else.
Alpha Match
Profile and messaging data required to run the service. Photographs carry camera-original provenance.
Alpha Crew
Roster, logbook and document records, to your own account.
SchoolSphere
School records, held for the school that operates the instance.

Each product publishes its own privacy policy, which is the binding one. This page describes the posture across the portfolio.

Reporting a vulnerability

Write to info@alphazulu.group with enough detail to reproduce the problem. We will confirm receipt, tell you what we find, and credit you when it is fixed unless you would rather we did not.

Please do not test against other people’s accounts or data. There is no paid bounty programme at present, and saying so is better than implying one exists.