Where your evidence lives and what happens to it.
The Exhibit Log app is not open yet. This page describes how it works when it opens. If anything changes before then, this page changes first.
Your files stay with you
Your files stay on your device unless you choose sealed copies, which are locked on your device first. Exhibit Log's servers never open or view your files. With sealed copies on, they hold locked copies that only your passphrase can open.
What Exhibit Log holds
Unless you choose sealed copies, we never hold your files, so we cannot recover a file you lose. Keep your own backups.
What we do not do
- We do not sell evidence, case contents, or anything you record.
- We do not use your case contents to train models.
- We do not place advertising or analytics trackers inside the application.
- We do not accept attachments by email. Emails to Exhibit Log that carry an attachment are rejected before delivery.
Integrity of a record
When you add a file, Exhibit Log computes its SHA-256 fingerprint on your device. If the file changes by a single byte, the fingerprint changes, so you can show a file has not been altered since you recorded it.
A fingerprint shows a file has not changed. It does not, on its own, show that the content was ever at the address you recorded. When the app opens, each fingerprint will also be sent to an independent timestamping authority (RFC 3161). Only the fingerprint is sent, never the file.
If something goes wrong
If there is a security incident affecting your data, we will tell you, even where no law requires it.
Export
Everything you enter can be exported at any time in a format you can open without Exhibit Log.
Reporting a vulnerability
Write to support@exhibitlog.com with steps to reproduce. Do not attach files. We will acknowledge within three business days. Please do not test against other people's data.