\babel@toc {english}{}\relax 
\contentsline {chapter}{\numberline {1}Peergos verification (what was actually audited)}{3}{chapter.1}%
\contentsline {section}{\numberline {1.1}Claim to check}{3}{section.1.1}%
\contentsline {section}{\numberline {1.2}Independent security audits (Europe)}{3}{section.1.2}%
\contentsline {section}{\numberline {1.3}EU funding / NLnet}{3}{section.1.3}%
\contentsline {section}{\numberline {1.4}Hosted instance location}{3}{section.1.4}%
\contentsline {section}{\numberline {1.5}Encrypted filesystem + hashed IPFS (design)}{4}{section.1.5}%
\contentsline {section}{\numberline {1.6}Not verified / do not claim}{4}{section.1.6}%
\contentsline {chapter}{\numberline {2}Architecture (audit interview)}{5}{chapter.2}%
\contentsline {chapter}{\numberline {3}BAAs and DPAs when ciphertext has no host keys}{7}{chapter.3}%
\contentsline {section}{\numberline {3.1}The operator statement}{7}{section.3.1}%
\contentsline {section}{\numberline {3.2}HIPAA (US) — Business Associate}{7}{section.3.2}%
\contentsline {section}{\numberline {3.3}GDPR (EU/UK) — processor vs technical measure}{8}{section.3.3}%
\contentsline {section}{\numberline {3.4}NATS operators}{8}{section.3.4}%
\contentsline {section}{\numberline {3.5}What “making yourself audit\sphinxhyphen {}ready” means}{8}{section.3.5}%
\contentsline {chapter}{\numberline {4}Audit\sphinxhyphen {}ready checklist}{9}{chapter.4}%
\contentsline {section}{\numberline {4.1}A. Scope and data map}{9}{section.4.1}%
\contentsline {section}{\numberline {4.2}B. Keys and encryption}{9}{section.4.2}%
\contentsline {section}{\numberline {4.3}C. Access}{9}{section.4.3}%
\contentsline {section}{\numberline {4.4}D. Integrity and backup}{9}{section.4.4}%
\contentsline {section}{\numberline {4.5}E. Logging}{10}{section.4.5}%
\contentsline {section}{\numberline {4.6}F. Contracts (counsel)}{10}{section.4.6}%
\contentsline {section}{\numberline {4.7}G. Independent audit of \sphinxstyleemphasis {you}}{10}{section.4.7}%
\contentsline {chapter}{\numberline {5}How to use this pack}{11}{chapter.5}%
\contentsline {chapter}{\numberline {6}What we verified about Peergos (EU)}{13}{chapter.6}%