Code signing policy

How Veyndesk releases are signed, and by whom.

Last updated 31 October 2026 · Veyndesk 0.5.1

Free code signing provided by SignPath.io, certificate by SignPath Foundation.

Status: Veyndesk is applying to the SignPath Foundation programme. Until the application is approved, Windows releases are not signed and Windows shows a SmartScreen warning (how to install anyway). This page will be updated when signing starts.

What is signed

• Only binaries built by the project's GitHub Actions workflow from the public source code in github.com/veyndesk/veyndesk.
• Windows: the installer (Veyndesk_x.y.z_x64-setup.exe) and the app (Veyndesk.exe). Each signed file carries the product name “Veyndesk” and its version.
• Nothing built on a personal computer is signed. Third-party programs (for example cloudflared, which the app downloads from Cloudflare's official GitHub releases) are not signed by us.

Team roles

Changes from outside contributors are reviewed before they are merged. Every signing request is approved manually by an approver. Team members use multi-factor authentication for GitHub and SignPath.

Privacy

Veyndesk sends no analytics or telemetry and has no accounts. While it is running, it contacts only the services needed to make the computer reachable and to set up remote sessions (a public message service to find partners by ID, STUN servers, and a Cloudflare relay). Screen content and input go only to a partner you connected with. Exactly what is sent to each service is listed on the privacy page.

Uninstall

Windows: Settings → Apps → Veyndesk → Uninstall. macOS: drag Veyndesk to the Trash. Linux: sudo apt remove veyndesk or delete the AppImage.