Privacy & Security Repo for GAEN - Exposure Notification Apps

We believe that transparency in our software is an important part of ensuring security and privacy. This repository is meant for open source software developers, interested security and privacy experts looking for informatin about Path Check's:

• Privacy and Security Principles.
• Test reports relating to Security and Privacy.
• External test reports related to our adherence to security and privacy (i.e. static code analysis).
• Enhanced Privacy Threat Model for Covid-19
• Related documents, such as Data Privacy Impact Assessments

2020-11 Security Certification Letter

Privacy & Security Principles

Path Check's Privacy & Security Principles are listed here

We are building Enhanced Privacy Threat Modeling with comprehensive coverage of Threat Categories and Attacker Capabilities for validation and testing.

How to contribute

• Become familiar with Developers Security Guidelines
• Submit a pull request
• Request reviews on Slack channel #fn_privacy channel (message Ananya Gangavarapu or Adam Leon Smith if you need to be added to this channel)

Other sources of Information

• https://github.com/PrivateKit/PrivacyDocuments provides technical research from the MIT team
• https://github.com/ComputationalLaw/CV19-Data-Privacy-Principles/ provides input from the MIT Computational Law team

Repository Information

• This repository is maintained by Tuik Security Group LLC