How Franz is secured

Assessed by an outside lab, every year

Franz passed Google's CASA Tier 2 security assessment in 2026, carried out by TAC Security. The assessment covered the whole backend and the data layers that handle Google user data. It's repeated every year.

Where your data lives

Your local data sits in SQLite databases on your machine, one per domain. Cloud features run in the EU under a data processing agreement. The documents behind that:

• Privacy policy
• Data processing agreement
• Subprocessors

Signed Linux builds

Every Linux release ships a SHA256SUMS manifest with a detached GPG signature. Verify it with the public signing key before you install.

• SHA256SUMS
• SHA256SUMS.asc
• Download SIGNING_KEY.asc

Report a security issue

Found a vulnerability? Send it through the support form. I read every report myself and reply personally.