text: Secure Data Sharing with TozStore - Tozny
  Secure Data Sharing with TozStore
  Last week, we covered how to collect, store, and process encrypted data using Tozny's TozStore product. This week, we'll dive in a bit deeper and demonstrate how the end-to-end secure data sharing mechanisms work.
  TozStore's End-to-End Encryption Model
  TozStore itself is built atop Tozny's end-to-end encrypted database platform, e3db. The platform itself uses a blend of symmetric and asymmetric encryption to keep data safe and secure in such a way that only explicitly authorized parties ever have access. Records stored within e3db are JSON documents where the field names are kept in plaintext (for efficient database queries) and the values are encrypted at rest.
  Before forms are submitted using TozStore, the data is encrypted in the browser using a dynamically-generated key. The protected record is stored on the server, then shared with the client you've configured the TozStore form to use. This sharing operation uses that client's stored public key to re-wrap the symmetric key originally used to protect the record.
  TozStore Setup
  Just like last week, we're going to create both a TozStore Client and Form to process incoming setup. If you haven't signed up for an account yet, the Tozny Platform Dashboard will help set you up with a free account.
  Customers will enter a relationship with this startup by completing a straight-forward signup form that collects the required data. To prevent this information from being intercepted by a malicious party or potentially leaked in the event of a breach, we'll use TozStore to collect the information:
  This example uses the easy variant of the TozStore SDK that automatically tokenizes string fields in the form submission. If radio buttons or select boxes were required, we'd need to use the web variant of the SDK instead (as we did last week).
  When our new customers submit this form, the data is automatically collected into a JSON document, encrypted in the browser, then submitted to TozStore for storage. The form itself will submit a data item called innovault_record_id to whatever server is specified in the form's action parameter – this can be used later to extract individual records, but isn't necessary for this example itself.
  TozStore is a great piece of technology for securely collecting data from end users through a browser. When paired with the full e3db SDK on a secure server, it becomes both a data collection and secure collaboration platform.
  A next step for anyone just getting started, would be to create a TozStore account and give the platform a try. It's free for the first 30 days to give developers a chance to get hands-on experience before making a commitment.