Data privacy.
Secure connections. For everyone.
Our Mission
OpenSSL Foundation works to ensure that everyone, including nonprofits, academics, and independent developers, has access to fundamental data privacy and security tools that are the backbone of internet protection, quietly safeguarding millions of users.
We do this to help build a safer internet — one that serves the public interest and upholds privacy and security as foundational rights.
What we do
OpenSSL Foundation enables access to online privacy and security tools for everyone as a fundamental human right. We do this by:
OpenSSL Ecosystem
OpenSSL Foundation is part of a broader OpenSSL ecosystem, which includes OpenSSL Corporation, the OpenSSL Conference, OpenSSL Projects, and Communities, with the OpenSSL Library at the center. While each of these groups has its own distinct purpose, we all have signed on to the overarching OpenSSL Mission:
We believe everyone should have access to security and privacy tools, whoever they are, wherever they are or whatever their personal beliefs are, as a fundamental human right.
Our shared values
Communities
We believe all our communities are important.
Open source principles
We believe in the principles of open source software, not only for its inherent values but also for the transparency and accountability it provides to our security and privacy tools.
Conduct
We believe in behaving in a manner that fosters trust and confidence.
By-laws and privacy
By-Laws
The By-Laws of the Foundation are in the process of being updated.
Privacy policy
Data privacy is central to the Foundation's mission so we’re pleased to disclose how we collect, store and use personal information. In addition, we hope this policy will be an inspiration for others.
Please note that this policy specifically covers OpenSSL Foundation’s operations and not the OpenSSL Library, the OpenSSL Corporation, or any other OpenSSL Project.
What information do we collect for the Foundation itself?
- We collect information you provide through forms on our website or interactions with staff.
- We collect contact information from people who support the Foundation financially.
- We may collect data that you voluntarily share via surveys.
- We will always ask permission before making recordings or using technology to transcribe conversations.
- We may retain server logs which include IP address information.
What do we use your information for?
Broadly speaking, we use information we collect in accordance with our mission and values. In particular, we strive to “build a safer internet — one that serves the public interest and upholds privacy and security as foundational rights.”
- We send a newsletter to people who opt into receiving it. There is a link at the bottom of each newsletter to opt out or you can use this link to unsubscribe.
- We may send other limited communications from time to time, such as a fundraising appeal or an announcement about an upcoming event.
- We use survey feedback to help us fulfill our mission.
- In order to maintain a healthy community, we analyze visitor data and occasionally contact individuals directly regarding their contributions.
- IP address information is retained in the event it’s needed for forensic purposes.
- Whenever possible, we will aggregate statistics in order to protect individuals’ data.
How do we protect your information?
OpenSSL Foundation selects vendors that align with our values and reevaluates them from time to time.
Staff use appropriate security measures when processing and storing data.
What is our data retention policy?
We retain data only as long as it serves a business need. Upon your written request, we will gladly remove personal data from our databases, if possible.
Do we use cookies?
No.
Do we disclose any information to other organizations?
We do not sell, share, or trade your personally identifiable information with other organizations.
Changes to our Privacy Policy
If we decide to change our privacy policy, we will post those changes on this page.
This document is CC BY-SA 4.0. It was last updated on January 7, 2026.
We believe everyone should have access to security and privacy tools.
Join our mission to protect global digital infrastructure