A: Hi Brightspace,

1) Yes, we conduct continuous internal security testing and annual third-party penetration tests. For sharing the business-approved audit reports, we require an NDA, after which our latest audit partner issues an individualized report.

2) Data Security:

✔️ Client-side & end-to-end encryption — passwords are encrypted before leaving your device (not hashed)
✔️ Data fragmentation — encrypted data is split into pieces on your device
✔️ Distributed storage — fragments are stored across multiple cloud providers
✔️ Blockchain-based authorization — ensures the highest security and control

3) Zero-Knowledge Architecture Is Version Independent

- Even if an update introduced a bug, TransferChain:

- Never stores master keys

- Never stores decrypted data

- Never holds full unfragmented objects

- Cannot reassemble data server-side

So updates cannot silently introduce custodial access, because the architecture does not allow it.

This is not policy-based security.
It is protocol-level restriction.

4) As I checked quickly , Password Boss encrypts data but stores it centrally.
TransferChain eliminates single storage custody entirely through fragmentation + multi-cloud distribution.

This is architectural-level superiority, not just algorithm choice.

Best regards,
— Mert | TransferChain 🔐