We expect governments to ask about PolyLock™. They often have concerns about strong encryption, and those concerns are serious. Here is our answer, in writing, before the question is asked.
PolyLock™ has no backdoor, no master key and no way around the keys a file’s owner chose. We will not build one: not for a government, not for a customer, not for a price. Pressure will not change that. A way in built for one party is a way in for others too, and the first to find it is rarely the one it was built for.
We do not hold your keys, so we do not open encrypted files. That is by design. With no keys in our hands, there are no keys for us to hand over.
Encrypting something with PolyLock™ does not put it beyond lawful process, and it does not make an unlawful act lawful. Lawful process reaches the people who hold the keys: the owner of the file, and in an organization, the recovery ways that organization declared itself. An organization keeps the ability to open its own data and meet its own obligations.
It exists to protect privacy and confidentiality. Using it to hide evidence, further a crime or evade a lawful order is forbidden by the notice each user accepts. We may end the license and refer the matter to law enforcement.
Threats to human life come first. We respond promptly to lawful emergency requests and share what we actually hold. We hold no keys and no files, so what is inside an encrypted file stays with the people who hold its keys.
We understand the power of what we have built, and the ethical responsibility that comes with it. We carry both: strong privacy for the people and organizations who rely on PolyLock™, and no refuge for those who would use it to harm others.