Frequently asked questions.

No. Documents, file and folder names, comments and the text of deadlines are encrypted in your browser before they reach our servers, and the keys to decrypt them never reach us. How it works

What it needs to run the service: email addresses, who is a member of what and with which role, how many files there are and how large, the dates of actions, IP addresses (for no more than 30 days) and the dates of reminders. The full list

We could only hand over what we have: encrypted data and the information listed on the Security page. We do not have the keys to open the documents.

You get back in with the recovery key Pontile asks you to save when you create your account. If you lose both the password and the recovery key, the data cannot be recovered: not even we can open it.

In Italy: servers, database, encrypted file storage and backups are in Italian data centres.

Yes. Each section has its own keys and members: someone invited only to Tender cannot read Technical or any other section. Hubs and sections

Yes, with the Deposit role: they upload into the section you choose but cannot open documents, not even the ones they delivered. They only see the receipts of their own deliveries.

No, and no system can promise that. They lose access at once, the section keys change and they cannot read anything uploaded afterwards.

No. The email only says there is a deadline in a hub and asks you to open Pontile, where the text is decrypted.

No: Pontile runs in a recent browser, on a computer and on a phone too. Installable apps are planned for later.

It is the account of a firm or company that follows several concession holders: it has its own members (owner, administrators, staff), opens a hub for each client and, from Client management, sends document requests and follows progress. Pontile for organizations

Yes. The members of the organization are listed in a signed chain that the client’s browser verifies: the firm cannot add someone secretly.

You remove them from the organization: they lose access at once, and the keys of the organization and of every hub they could read are rotated. Whatever they had already downloaded stays with them.

For now an organization manages the hubs it creates for its clients. Linking an existing personal hub will come later; meanwhile the owner can invite the firm’s members as individuals.

Pontile is in development and there is no launch date yet. You can ask for a demo or for early access. Talk to the Coste360 team

Pricing has not been set yet: we will publish it before launch. Meanwhile you can request a demo. Talk to the Coste360 team

Yes, the app code: before launch we will publish the client that runs in the browser, cryptography included, as source-available. That is where encryption happens, so that is where anyone will be able to verify it. An external security audit, with published results, is also planned. The protocol