Open Testimony helps human-rights organizations, journalists, legal observers, and civil-liberties groups capture and preserve verifiable photo and video evidence. Each recording receives a cryptographic signature and a tamper-evident evidence manifest from the moment of capture.

KEY FEATURES

• Device-bound signatures — On supported phones, ECDSA P-256 signing keys stay in Android StrongBox or the hardware-backed keystore. Devices without suitable secure hardware use a software HMAC fallback, which the evidence manifest identifies.

• Location and time evidence — GPS coordinates, optional nearby-network observations, device time, and network-verified timestamps provide capture context and help expose clock or metadata tampering.

• Hosted or self-hosted — Most organizations use Open Testimony's multi-tenant service in Finland, with organization-level access controls. Organizations can also operate the same open-source platform on their own infrastructure.

• Encryption in transit and at rest — Uploads use HTTPS/TLS. Evidence on the hosted service is encrypted at rest with AES-256-GCM.

• Multi-language support — Available in English, Spanish, French, Somali, Arabic, Ukrainian, Simplified Chinese, and Traditional Chinese.

• Search and review tools — Authorized organization staff can search transcripts and visual indexes generated on Open Testimony-operated or self-hosted servers.

• Tamper-evident audit trail — Significant platform actions are recorded in a hash-chained audit log with post-quantum signatures.

• Organization-based delivery — Select an organization during setup; uploaded evidence is routed to that organization's isolated workspace.

• Controlled media access — Record new evidence, import selected items through Android's system photo picker, and optionally save a local copy.

PRIVACY

Open Testimony has no ads and does not sell data or use it for cross-app tracking. The app processes the evidence you choose to upload, capture location and integrity metadata, a pseudonymous device identifier, and diagnostic/performance data needed to operate and secure the service. Recordings are not sent to Firebase, advertising networks, or third-party AI services. See the Privacy Policy for collection, sharing, retention, and deletion details.