How envelope encryption can let a rights-holder or authorized data steward control the key to protected data, where applicable, while the platform holds nothing it can read.
How the mechanism works
Step through the lifecycle and inspect what the platform holds at each stage: it never holds readable protected values.
Community side
(1.2345, 103.5678)
Platform database
—
Nothing uploaded yet
The community encrypts protected coordinates on its own device. Plaintext becomes ciphertext before anything leaves.
1 / 5
One synthetic sample, encrypted in browser
This runs encryption in your browser for demonstration. The protected sample track is encrypted locally, only ciphertext is uploaded to the demo endpoint, and the stored server record can be inspected. After revocation in this session, the demo no longer has the key needed to open the stored copy.
