How Nordlys Advokater is built
- The adviser and the client each have a key pair. The server keeps only the public halves.
- Each document is encrypted with its own random key. That key is then wrapped once for each reader, with the reader’s public key.
- To share, the adviser wraps the document key for the client. To remove access, the adviser encrypts the document again with a new key and wraps it only for the readers who stay. A key the client kept opens nothing on the server after that.
- Data on the server is deleted after 7 days.