The live social platform every product on this site was built to protect. Not a demo environment — a real platform with real users, running the full Candor safety architecture in production, in English and Spanish.
Candor was built safety-first: the platform and its protection were designed together, not bolted to each other afterward. Every commercial product on this site began life embedded in this platform’s gateway, protecting these users — and was extracted into a standalone service only after it worked here. Built for ourselves, available to you.
The platform collects no email, no password, and no phone number. Accounts are cryptographic keypairs generated on the user’s own device, recoverable by seed phrase, unlocked locally by PIN — the private key never touches the server. There is no credential database to breach and no identity file to subpoena, because neither exists.
User content is hosted in Iceland under GDPR jurisdiction. Safety processing and mandatory legal reporting run on US infrastructure, where they belong. The two are separated deliberately: privacy protection and child-safety compliance each live in the jurisdiction that takes them most seriously. The platform publishes a signed warrant canary, updated monthly and anchored to the Bitcoin chain.
The safety modules sit in the platform’s write path — they cannot be skipped. Each one is also a product on this site, with its own dated verified-behavior log.
Every image upload passes an industry hash-match gate before storage — fail-closed: if screening cannot complete, the upload does not publish. Video is screened frame-wise through the same gate.
Guardian Shield →Text and live-stream transcripts screened for terrorist and violent-extremist content in English and Spanish, with escalation to human review.
ThreatShield →Posts carry credibility analysis with reasons shown — labels inform readers rather than suppress speech.
Truth Shield →Distress signals open welfare cases on an escalation ladder. The welfare channel has no path to punishment — it can summon help, never a sanction.
Beacon →Bot-farm and coordination detection at the platform’s edge, scoring behavior — velocity, subnet patterns, template text — never newness.
Sentinel →Minors attempting to open profiles are detected and redirected — adulthood is proven cryptographically, without storing identity documents.
Guardian Shield →This platform is where the verified-behavior evidence on this site comes from: the dated proofs on each product page were run against these live production services, screening this platform’s real traffic. When a product page says a behavior was verified on a date, this is the deployment it was verified on.
The platform is live. The safety architecture protecting it is what this site sells.
Visit the platform Read the warrant canaryCandor works at the intersection of gaming safety, age assurance, privacy, parental consent, cryptographic evidence, and auditable trust & safety decisions. Related: