暗号化基準

お客様のデータはすべての段階で暗号化されます—通信時はTLS 1.2+、保存時はAES-256-GCM。業界標準の暗号化で安心を提供します。

通信時の暗号化

お客様のブラウザと当社サーバー間のすべてのデータはTLSで暗号化されます。

当社データベースに保存される機微なデータはAES-256-GCMで暗号化されます。

1
Encrypted connection
Every request travels over TLS 1.3 with Perfect Forward Secrecy. No plaintext ever crosses the wire.
2
In-memory processing only
Presidio AI analyzes and anonymizes text entirely in RAM. Your original content is never written to disk or stored in a database.
3
Keys derived with Argon2id
User encryption keys are derived from your password using Argon2id — the winner of the Password Hashing Competition — before being wrapped with AES-256-GCM.
4
Zero-Knowledge key storage
Your wrapped key is stored encrypted. The server never sees your plaintext key or password. Only you can unwrap it.
5
Asymmetric option with RSA-4096
For multi-party workflows, RSA-4096-OAEP encapsulates a session key so only the private key holder can deanonymize output.

Standard	Use Case	Key / Strength
TLS 1.3	Data in transit	ECDHE + AES-GCM
AES-256-GCM	Data at rest	256-bit
XChaCha20-Poly1305	Zero-knowledge key storage	256-bit
Argon2id	Password key derivation	PHC winner
RSA-4096-OAEP-SHA256	Asymmetric key encapsulation	4096-bit

セキュリティドキュメント全文をご覧ください。