Security docs

Security boundaries for temporary secret sharing.

Use these docs to understand Shhhs encryption boundaries, no-secret-recovery policy, preview protections, and operational metadata model.

Private by default

The page belongs to the public product surface. Application flows, secret links, request links, rooms, console routes, billing callbacks, and recovery routes stay out of search indexes.

  • Public product route
  • No private identifiers
  • Canonical metadata

No secret-content processing

Shhhs does not read, profile, train on, index, or retain secret content beyond configured expiry.

  • No AI processing on secrets
  • No secret recovery
  • Metadata-only operations

FAQ

Can this page include private links?

No. Public pages never include secret identifiers, room identifiers, filenames, sender names, access requirements, or payload-derived text.

Where do app flows live?

Application flows live under /app and are excluded from sitemap and search indexing.