We hold as few keys as possible, and none of yours.

Shield is non-custodial: your wallet signs every revoke; the API never holds a key. Receipt signing keys exist only inside the audit worker, a separate process under its own user.

The requesting wallet never appears in a receipt. Audit requests are kept 30 days for limits and "My audits", then deleted. No email is collected; accounts are wallets.

Findings name the bug and the fix. Never exploit code, never attack steps.

Found something in ByteGuard itself? A disclosure contact will be listed here soon.