12 June 2026
Privacy Safeguards That Actually Mean Something
Trust isn't abstract. It's concrete. It's an encryption key. It's a human reviewing your release. It's a policy that explicitly says what won't happen.
Here's what Agathon does to earn your trust:
Envelope encryption. Your documents are encrypted with a unique key, and that key is encrypted with another key. Breach one layer, you still can't read the documents. Breach the other, you still can't use the keys. Both layers need to be compromised for an attacker to see anything. This is how banks protect money. We protect your information the same way.
Narrow-purpose credentials. Your check-in PIN can only reset the check-in clock. It cannot view documents. Cannot change recipients. Cannot do anything else. Ever. A low-frequency credential (your password) guards high-stakes actions. A high-frequency credential (your PIN) guards only a trivial action. This is how you can safely check in dozens of times without creating a security liability.
One-time secrets. Your two-factor authentication secret is shown to you exactly once, then encrypted at rest and never re-displayed. This is what serious security looks like. Not "forgot your code?" recovery flows that inadvertently re-expose your secret. Not secret audit logs that contain the data. Once you see it, you've seen it, and that's it.
No automatic public release. Even if your account reaches full escalation and your release policy activates, anything going to a public channel (social media, forums, etc.) is held for human review before it's sent. An automated system might have a bug. A false positive might occur. A human being will catch it before your information goes public.
You, not us, control recipients. Nothing releases to anyone you didn't explicitly name. There's no default disclosure, no secondary sharing, no "we're also notifying X for your security." The documents go exactly where you decided they should go, to exactly who you chose.
Agathon exists to hold information that matters profoundly. That demand for trust has to be matched by real architectural choices, not just marketing language. Encryption, key separation, human review, and narrow scoping aren't luxuries. They're the foundation.