An access application (AA) is the central configuration object that defines how data sharing works between a requesting organisation and data-providing individuals. It acts as a data sharing contract definition — specifying what data is requested, how it is encrypted, who can participate, and what happens at each stage of the workflow.
Agents sometimes need a secret to do their work — for example, an access token for an external service or a key for a third-party API. Agent credentials are how a worker asks a person for that secret, receives it in encrypted form, uses it for a bounded period, and has it withdrawn afterwards.
Raytio uses end-to-end encryption to protect your data. This means your information is encrypted on your device before it is sent to our servers. Raytio cannot read your data — only you and the people you choose to share it with can.
Raytio allows users to share encrypted data without compromising security. This page explains how the sharing system works — from how data is encrypted for a specific recipient, to how multiple team members can access shared submissions.