A security service you can't inspect is a security service you have to trust. VettID's entire stack — the enclave code, the apps, the agent connector, even the cloud infrastructure — is public on GitHub. Read it, audit it, build it yourself, and verify that what we run is what we published.
AGPL-3.0 LicensedOpen source isn't a marketing choice here — it's load-bearing. VettID's trust model depends on cryptographic attestation: your app verifies the exact code running in the enclave before sharing anything. Attestation only means something when the code being attested is public. The published PCR values on our repositories are how you check that the enclave you're talking to was built from the source you can read.
This website and the AWS infrastructure serving it — the CDK stacks, edge logging, and the mailing list you can join right now.
The backend: AWS CDK infrastructure, Lambda handlers, and the Nitro Enclave vault-manager where member secrets live.
The Android app — credential handling, vault pairing, and session crypto on your phone.
The iOS app — the same member experience, built native for iPhone.
The desktop companion — time-limited, capability-scoped sessions where your phone stays in control.
The Agent Connector — a sidecar binary that gives AI agents secure, owner-controlled access to vault secrets. Secrets pass through; they're never cached.
The integration layer that lets organizations run Service Vaults and connect with members without storing their data.
The end-to-end test suite that exercises the whole platform.
Three approaches to patient-record lookup compared side by side: static credentials, IAM tokens, and VettID's organizational vault.
Lightweight Encrypted Agent Secret Handling — a proposed companion standard to MCP for secure, auditable, human-controlled secret access by AI agents.
Zero-Knowledge Trust: the next evolution of security for the agentic era — the thinking behind VettID's architecture.
Issues and pull requests welcome. Security findings go to security@vettid.org — not the public tracker.