Differences
This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
security [2017/12/12 16:37] – created dstillman | security [2023/05/31 11:44] (current) – dstillman | ||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== Zotero | + | ====== Zotero Security ===== |
+ | |||
+ | //If you believe you've found a security issue in Zotero software, please contact [[security@zotero.org]].// | ||
Zotero was created with the philosophy that your research data belongs to you and should be kept secure and private by default. | Zotero was created with the philosophy that your research data belongs to you and should be kept secure and private by default. | ||
- | All Zotero software is open-source and can be audited for security and privacy practices. | + | All Zotero software is [[https:// |
Unlike many cloud-based tools, the Zotero desktop application is a local program that runs on your computer and saves all research data locally by default. Unless you explicitly set up syncing, your research data never leaves your computer. | Unlike many cloud-based tools, the Zotero desktop application is a local program that runs on your computer and saves all research data locally by default. Unless you explicitly set up syncing, your research data never leaves your computer. | ||
Line 9: | Line 11: | ||
If institutional policies prevent uploading of data to third-party servers, Zotero can always be used locally without syncing any data, but syncing is required to use group functionality. | If institutional policies prevent uploading of data to third-party servers, Zotero can always be used locally without syncing any data, but syncing is required to use group functionality. | ||
- | If you choose to sync your data with the Zotero servers, all data is encrypted in transit with current best practices ([[https:// | + | If you choose to sync your data with the Zotero servers, all data is encrypted in transit with current best practices ([[https:// |
- | While library data can be synced only with Zotero servers, for syncing of attached | + | While library data and group files can be synced only with Zotero servers, for syncing of files in personal libraries |
- | The Zotero data server is open-source and can be run locally, which some organizations choose to do, but this can be technically challenging, | + | The Zotero data server is open-source and can be run locally, which some organizations choose to do, but this can be technically challenging, |
- | See our [[:terms/privacy|privacy | + | See our [[privacy|privacy |