Open Privacy Research Society

What Open Privacy Research Society does

Open Privacy Research Society is a non-profit society incorporated in British Columbia, Canada on February 11, 2018, headquartered in Vancouver. The organization researches, develops, and distributes free and open source privacy-preserving tools and conducts security research targeted at marginalized communities — including sex workers, queer people, individuals impacted by intimate partner abuse, and human rights activists — whose threat models are underserved by mainstream privacy products. Its portfolio spans the Cwtch metadata-resistant group messaging application (built on Flutter with Rust and C core libraries, cross-platform on Android, Windows, Linux, macOS, and Tails), the Lockbox encrypted web forms application for community mutual aid, the Repliqate reproducible build environment tool, and the Tapir P2P authentication framework with Fuzzytags probabilistic cryptographic tagging. The organization has produced notable research disclosures including cryptographic vulnerabilities in the Swiss Post/Scytl e-voting system (2019, leading to emergency patches) and the Vancouver patient medical data pager breach disclosure.

The organization operates without commercial revenue. All software is free and open source, and funding comes from individual donations (Patreon, PayPal, and cryptocurrency including Bitcoin, Monero, Zcash), institutional grants (Zcash Foundation, Digital Justice Lab, Privacy International), and externally organized benefit events. Distribution is exclusively through self-serve channels including direct downloads from cwtch.im, the git.openprivacy.ca code repository, Docker Hub, and the Google Play Store. The go-to-market motion is community-led through open source development, volunteer contributions, content marketing via the Discreet Log development blog, and earned media from vulnerability disclosures. The team is small (approximately 4 staff members as of 2020, with reductions in 2021) and led by Executive Director Sarah Jamie Lewis, Director of Engineering Dan Ballard, Research Director Erinn Atwater, and Staff Designer Marcia. The organization has experienced sustained funding shortfalls, with fundraising targets unmet in 2021 and 2023, resulting in workforce reductions, scaled-back publishing, and a lowered 2023 fundraising goal of $60,000.

Name

Open Privacy Research Society

Legal name

Open Privacy Research Society

Website

https://openprivacy.ca

Company type

Private

Founded year

2018

Operating status

Operating

Headcount range

1–10 employees

Short description

Open Privacy Research Society is a Vancouver-based non-profit that develops free open source privacy-preserving tools, including the Cwtch metadata-resistant messaging app and Lockbox encrypted forms, for marginalized communities such as sex workers, queer people, and human rights activists.

Ownership category

akta.pro rank

Product category

Privacy & Security Software (Open Source)

NAICS

Software Publishers (5132)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Secure/Encrypted Messaging (BPAMACAG)

akta.pro secondary industries

Software Supply Chain & Dependency Security (SBOM, Signing) (HDADACAD), Privacy Management (Consent, DSAR, RoPA) (HDADAFAH)

Keywords

• Privacy-preserving software
• Metadata-resistant communication
• Open source security tools
• Encrypted group messaging
• Mutual aid privacy tools

Headquarters

HQ city

Vancouver

HQ country

Canada

HQ region

North America

Offices1 record

Markets served

GTM type

B2C

Offering type

Software

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Marketing or Sales

Revenue model

1. Individual Donations: Recurring and one-time donations from individual supporters via Patreon and PayPal. Cryptocurrency donations accepted (Bitcoin, Monero, Zcash). Donation tiers include thank-you gifts like stickers for $5+ and sticker sheets for $25+.
2. Institutional Grants: Grant funding from organizations including Zcash Foundation ($40,000 USD in 2019), Digital Justice Lab (2018), and Privacy International (2020, restricted).
3. Benefit Events: Externally-organized benefit events such as 'Blockchain Against Evil' (2018) and 'Digital Sanctuary' (2019) where Open Privacy is the beneficiary.

Go-to-market motion2 records

Distribution channels4 records

Marketing channels7 records

Core offering

Open Privacy Research Society researches, builds, and distributes free and open source privacy-preserving software for marginalized communities. Its primary product, Cwtch, is a metadata-resistant group communication application available on Android, Windows, Linux, macOS, and Tails, layered on the organization's homegrown Tapir P2P framework and designed to resist surveillance and centralized control. It also ships Lockbox (encrypted web forms for mutual aid organizations) and Repliqate (isolated, reproducible build environments), and conducts publicly disclosed privacy and security research.

Product overview

Open Privacy Research Society develops a suite of privacy-preserving technology products and conducts security research. The primary product is Cwtch, a metadata-resistant group messaging application. Supporting products include Lockbox (encrypted web forms for mutual aid organizations) and Repliqate (isolated build environment tool). The organization also produces research including vulnerability disclosures and maintains Tapir as the underlying P2P protocol framework for Cwtch. All products are free and open source.

Differentiator

Problem solved

Functional benefit

Brands

• Cwtch: Metadata resistant group communication application for building privacy preserving applications. A messaging platform available on Android, Windows, Linux, and macOS.
• Lockbox
• Repliqate

Products and services

• Cwtch Metadata-resistant group communication application for building privacy-preserving applications, available on Android, Windows, Linux, macOS, and Tails OS. Supports profiles, group messaging, file sharing, and is built on the Tapir P2P framework to resist surveillance and centralized control. Designed for marginalized and persecuted communities seeking strong metadata protection.
• Lockbox Encrypted web forms application that enables safe and secure mutual aid. Consists of a desktop app for managing encryption/decryption keys and a web app for receiving and encrypting form submissions, designed so that even if the form server is compromised, submitted data remains encrypted and only the private key holder can decrypt it.
• Repliqate Tool for constructing isolated build environments, powered by Qemu and a standard Debian Cloud Image distribution, used in the production of reproducible and verifiable builds for Cwtch.

Quantifiable outcome

• Disclosed cryptographic vulnerabilities in Swiss Post/Scytl e-voting system that led to emergency patches during NSW elections and temporary suspension of Swiss e-voting
• +2 more outcomes

Named customers4 records

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Four partnerships are on record, tiered minor and core.

• Royal Bank of CanadaminorOthersBanking services provider for the organization in Canada.
• PayPalminorOthersDonation processing platform for accepting contributions from supporters.
• PatreonminorOthersRecurring donation platform enabling supporters to pledge monthly contributions.
• Vanessa Teague (University of Melbourne)coreStrategic or Co-development PartnerCo-researcher on disclosure of critical cryptographic flaws in Swiss Post/Scytl e-voting system published in 2019. Also collaborated with Olivier Pereira (UCLouvain) on the research.

Scale indicators6 records

Recent moves7 records

Expansion highlights5 records

Broad incumbents

• Wire: Wire offers end-to-end encrypted messaging with a comparable protocol foundation (Messaging Layer Security) and cross-platform support. It targets enterprise and government buyers alongside consumer use, making it a broader incumbent rather than a Cwtch-equivalent niche player.
• Proton AG: Proton provides privacy-respecting services (mail, VPN, calendar) with strong community overlap with Open Privacy's user base. While not focused on metadata-resistant messaging specifically, it operates in the same broader privacy-tools ecosystem and competes for the same donor/advocate attention.
• Signal Foundation: Signal is the dominant end-to-end encrypted messaging platform with substantially greater resources and user base. It operates broadly in the secure messaging space but does not specifically address the metadata-resistance or marginalized-community threat models that Cwtch targets.
• Tor Project: Tor provides the anonymity network that Cwtch is built on top of. They share overlapping mission (privacy for at-risk users) and technical foundation, and Cwtch's Tapir framework is explicitly positioned as a Ricochet successor built on Tor.

Direct peers

• Element (Matrix): Element builds on the Matrix protocol to provide end-to-end encrypted group messaging with federated/decentralized architecture. It overlaps directly with Cwtch's group-communication and metadata-handling focus, while also supporting broader enterprise use cases.
• Guardian Project: Guardian Project builds privacy and security-enhanced mobile apps (including Tor on Android) for journalists and activists. They share the same target user community and overlapping technology stack, and Cwtch explicitly distributes on Android for the same audience.
• Briar: Briar is an open-source metadata-resistant messaging app that, like Cwtch, is designed for journalists, activists, and at-risk users. Both share the same threat model (Tor-routed peer-to-peer, no metadata leakage) and target user base, making them the closest functional peer.
• Session: Session is an open-source end-to-end encrypted messenger using a decentralized onion-routed network with no phone-number or metadata requirements. It competes directly with Cwtch for privacy-conscious users seeking metadata-resistant group communication.

Emerging players

• Tails: Tails is a portable operating system focused on privacy and anonymity that Cwtch explicitly supports as a target platform. It serves overlapping users (journalists, activists) and is integrated into Open Privacy's distribution rather than competing directly, but the two ecosystems are deeply intertwined.
• Status: Status is an open-source, decentralized messaging platform with privacy-by-design architecture and a Web3 orientation. It competes for the same at-risk-user privacy-conscious messaging niche as Cwtch but with greater funding and a broader cryptocurrency integration focus.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xtwitter.com/openpriv
• Instagraminstagram.com/cwtch.im
• LinkedInlinkedin.com/company/open-privacy

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Open Privacy Research Society