OSH · Zero Trust SSH

OSH — Support

Zero-trust SSH certificate approvals, by Open layer technologies L.L.C S.O.C.

Need help? Email us at ad@openlay.com — we typically reply within 1–2 business days.

What OSH does

OSH is a companion approver app for a zero-trust SSH gateway. You enroll your iPhone to a gateway that you or your organization operates (by scanning its enrollment QR code), and then approve or deny SSH certificate requests on the device using Face ID. The signing key never leaves your iPhone's Secure Enclave.

Getting started

Enroll: Scan the root-enrollment QR code shown by your gateway.
Approve: When an SSH access request arrives, review it and authenticate with Face ID to sign the approval.
Manage: View history, access rules, and connection settings inside the app.

OSH requires a running gateway to connect to. If you don't have one yet, contact your administrator or reach us at ad@openlay.com.

Privacy Policy

Effective date: 6 July 2026

Summary: OSH does not collect, store, or share any personal data with us (Open layer technologies). The app has no analytics, no advertising, no trackers, and no third-party SDKs. Data stays on your device or goes only to the gateway you choose to connect to.

Data we collect

None. We, the developer, do not operate any server that receives your data, and the app does not send data to us. OSH is a client that connects only to the SSH gateway you configure.

Data stored on your device

Signing key: generated and stored inside your iPhone's Secure Enclave. It cannot be exported and never leaves the device.
Connection settings and history: the gateway address you enter and a local record of approvals, stored on your device only.

Data sent to your gateway

When you enroll and approve requests, OSH sends your device's public key and your approval decisions to the gateway you configured. That gateway is operated by you or your organization — not by us. Any data handled there is governed by that operator's own policies, not this one.

Camera & Face ID

Camera is used solely to scan the enrollment QR code. Images are processed on-device and are not stored or transmitted.
Face ID / biometrics are handled entirely by iOS and the Secure Enclave. Biometric data is never accessible to the app or to us.

What we do NOT do

No analytics or usage tracking.
No advertising and no advertising identifiers (IDFA).
No third-party SDKs or data brokers.
No selling or sharing of data with anyone.

Children

OSH is a professional security tool and is not directed at children under 13.

Changes

If we update this policy, we will revise the effective date above and post the new version at this URL.

Contact

Questions about this policy or your data: ad@openlay.com.