# Blindsight

> Private Surveys, Feedback & Communications with Zero-Knowledge Encryption

Blindsight is an enterprise survey and feedback platform built on zero-knowledge cryptographic guarantees. The server never has access to survey response decryption keys, cannot reconstruct participant identities, and implements permanent anti-resurrection cryptographic shredding per GDPR Article 17.

## Core Architectural Moats

- **Zero-Knowledge End-to-End Encryption (E2EE)**: RSA-OAEP 2048 key wrapping combined with AES-256-GCM bulk payload encryption executed in the respondent's browser via WebCrypto. The server stores only public keys and cannot inspect responses.
- **GDPR Article 17 Anti-Resurrection Cryptographic Shredding**: Key-per-subject AES-256-GCM architecture. When a subject invokes the right to erasure, their unique cryptographic key is permanently purged and zeroized. Even if cold database backup snapshots are restored, encrypted records cannot be resurrected. Emits verifiable cryptographic certificates.
- **HIPAA ePHI Redaction**: High-performance streaming Data Loss Prevention (DLP) engine scanning and redacting all 18 Safe Harbor identifiers per 45 CFR §164.514(b)(2) prior to storage.
- **Whistleblower & Ethics Hotline (Anonymous Chat)**: Two-way asynchronous communication with anonymous survey respondents via ephemeral cryptographic proxy tokens (RFC compliant with EU Directive 2019/1937 and SOX).
- **Enterprise Identity & Directory Sync**: Built-in SAML 2.0 Web Browser SSO Profile (XML-DSig RSA-SHA256, C14N) and SCIM 2.0 (RFC 7643 / RFC 7644) directory provisioning for Okta, Microsoft Entra ID, Ping Identity, and OneLogin.

## Product Capabilities

- **Surveys**: Dynamic logic, encrypted responses, multi-language localization, A/B testing, and accessibility (WCAG 2.1 AA).
- **Mail Client**: Modern encrypted email client with AI-powered task extraction and RFC 5545 calendar integration.
- **Live Polls**: Realtime Server-Sent Events (SSE) audience voting with anti-tampering verification.
- **Productivity Companion**: Integrated Calendar, Tasks, and Notes.

## Key URLs

- [Features](https://blindsightsurveys.com/features): Complete overview of encryption, DLP, and survey capabilities.
- [Pricing](https://blindsightsurveys.com/pricing): Tier matrix (Free $0/mo, Starter $19/mo, Pro $49/mo, Enterprise Custom).
- [How It Works](https://blindsightsurveys.com/how-it-works): Cryptographic workflow and key exchange mechanics.
- [Security Report](https://blindsightsurveys.com/security-report): Audit logs, penetration test certifications, and CVSS tracking.
- [API Documentation](https://blindsightsurveys.com/resources/api-docs): REST and SCIM 2.0 API references.
- [Full LLM Knowledge Graph](https://blindsightsurveys.com/llms-full.txt): Exhaustive technical specification and comparative analysis.