# TrustPin

> TrustPin is a certificate-pinning platform for mobile and desktop apps. It lets teams update SSL/TLS certificate pins remotely, without shipping a new app release, eliminating the multi-week emergency-update cycle that breaks traditional pinning. Built to the OWASP MASVS, privacy by design (data-minimization principles aligned with GDPR and CCPA), EU-hosted, with SDKs for iOS/Swift, Android/Kotlin, Flutter, and React Native, plus a CLI for CI/CD automation. Operated by Capa7 LLC.

## Key facts

- Remote, zero-downtime certificate rotation, with no app-store release required.
- Configuration is signed with ECDSA P-256 and verified on-device against a published JWKS; pins use SHA-256 / SHA-512 (SPKI pinning recommended).
- Resilient delivery: redundant CDNs with automatic failover, an optional customer-owned (BYO) CDN as primary with TrustPin as backup, and on-device fallback to the last trusted configuration if delivery is unreachable, so pinning is never interrupted.
- Bring Your Own Keys (BYOK): sign configurations with your own private key; cryptographic trust never leaves your organization.
- Collects no identifying data about end users of customer apps; EU data residency (Frankfurt, with the mobile config origin in Ireland); GDPR Article 28 Data Processing Agreement available.
- 99.9% uptime SLA on paid plans, measured separately for configuration delivery and the management platform, with service credits if a target is missed.
- All connections use TLS 1.2+ with HSTS and Certificate Transparency (A+ SSL Labs rating).

## SDKs & documentation

- [Documentation](https://docs.trustpin.cloud): guides, API reference, SDK integration
- [Swift SDK (iOS/macOS)](https://trustpin-cloud.github.io/swift.sdk/)
- [Kotlin SDK (Android/JVM)](https://trustpin-cloud.github.io/kotlin.sdk/)
- [Flutter SDK](https://trustpin-cloud.github.io/flutter.sdk/)
- [React Native SDK](https://trustpin-cloud.github.io/react-native.sdk/): npm package `@trustpin/react-native`
- [TrustPin CLI](https://trustpin-cloud.github.io/cloud-console-cli/): command-line tool for CI/CD automation. Install: `brew tap trustpin-cloud/trustpin`, then `brew trust trustpin-cloud/trustpin` (required once on Homebrew 6.0+), then `brew install trustpin-cli`

## Site pages

- [Home](https://trustpin.cloud/): overview and how it works
- [Features](https://trustpin.cloud/features)
- [SDK Integration](https://trustpin.cloud/integration): code examples for iOS, Android, Flutter, React Native, and the CLI
- [DevSecOps](https://trustpin.cloud/devsecops): CI/CD pipeline integration
- [Security](https://trustpin.cloud/security): architecture, data residency, and compliance posture
- [Promon Partnership](https://trustpin.cloud/partners/promon): TrustPin partners with Promon to pair certificate pinning with Runtime Application Self-Protection (RASP) / app shielding for defense-in-depth
- [FAQ](https://trustpin.cloud/faq)
- [White Papers](https://trustpin.cloud/white-papers)
- [Contact](https://trustpin.cloud/contact)
- [Privacy Policy](https://trustpin.cloud/privacy)
- [Status](https://status.trustpin.cloud)