Yes. In September 2025, we engaged Cure53, an independent security consultancy based in Berlin, to perform a 21‑day white‑box assessment of IDZ. The scope covered our encryption libraries, mobile and web apps, backend APIs, and key‑management systems. The Cure53 report confirms a strong cryptographic foundation, identifies 20 findings, and provides recommendations which we have used to further improve IDZ’s security.

Read the Cure53 management summary (PDF on cure53.de) here.

Zero-knowledge encryption ensures only you can access your data. Because IDZ doesn’t hold your encryption keys, we have no way to view or decrypt your files and messages.

Many providers collect and analyze your data to serve ads or improve their algorithms. IDZ does not collect metadata, IP addresses, or cookies. Your privacy is our priority.

Most platforms store passwords or keys to make account recovery easier, but this also allows them to access your data for advertising purposes. IDZ avoids this to ensure your data remains private and secure.

No. IDZ has a strict no-tracking policy. We don’t collect metadata, logs, IP addresses, or any information about how you use our platform.

Never. IDZ is ad-free, so we don’t monetise your data or interrupt your experience with adverts.

No. We encrypt your data on your device, and only you have the keys. Even in the event of a breach, your files and chats remain unreadable to anyone but you.

Metadata includes details like file names, sizes, or timestamps, which can reveal a lot about your activity. To protect your privacy, IDZ avoids collecting any metadata, ensuring that your usage remains completely confidential.

All data is encrypted before leaving your device, so even if our servers were compromised, those files would remain inaccessible without your personal keys.

The physical location of the servers with the encrypted data is in Ireland.