Source Reports was founded to help rebuild online trust between consumers and companies, damaged primarily by widespread phishing attempts and high profile privacy abuses.

The company is a philosophical experiment based on the premise that startups and corporations alike will want to become more transparent in the coming decade. If companies would like to join us then we will grow from here.

We've open sourced all of our essential code. Any feedback would be much appreciated! Contact us here.

FAQ

Why should we partner with Source Reports?

Our code is open source, so you could certainly recreate our user interface, and checking script on your own infrastructure. The benefit of using Source Reports as a partner in this effort is that we ensure for your customers that certain workarounds are not exercised. It is a matter of separation of duties.

How do you make money?

Verifiable open source is free on our platform. If you require a continuous audit report, we'll charge a monthly fee.

The audit report details the extent of your data collection, as well functional claims about your app if applicable (e.g. mathematical fairness of an in-app interaction). We check the new code every time your source repository is updated, so your customers can be sure our report is up to date.

We also charge if you would like an SLA beyond "as-available" for our verifiable open source product. We offer on-call and priority support as a service.

What are the limitations of the Source Reports system?

For now, all pipelines are required to be using an EC2 Autoscaling Group, AWS CodePipeline, and CodeDeploy. The userdata, AMI, and IAM permissions also must be used as the predetermined default. SSH is not allowed; a .pem file can not be included during the EC2 setup.

If you would like to request a different implmentation, please contact us.

Will you sign an NDA?

Yes, an NDA is standard for each implementation in which source code is not made public.

Will you sign a non-compete agreement?

Probably, please contact us with more details and we can proceed from there.