Divvi Up

Divvi Up can preserve user privacy while also collecting the application metrics needed to make product decisions.
Mozilla uses Divvi Up to collect metrics from users while preserving their privacy. Learn more about Divvi Up & Firefox.
Horizontal uses Divvi Up to collect telemetry in their sensitive applications at the intersection of technology, human rights, and justice. Learn more about Horizontal & Divvi Up.
Federated Learning is an emerging field of AI/ML and Divvi Up can help preserve user privacy when application developers train their models.
A team of researchers sponsored by NLNet have built a prototype integrating Flower with Divvi Up's distributed secure aggregation system. Learn more about Flower & Divvi Up.
All components of the Divvi Up system are open source and available on GitHub. Further, the core protocol, Distributed Aggregation Protocol (DAP), is on a path to become an Internet Engineering Task Force (IETF) standard co-developed by Internet Security Research Group (ISRG, best known known for Let's Encrypt), Cloudflare, and Mozilla.
Divvi Up is built and operated by the Internet Security Research Group, the same nonprofit behind Let's Encrypt, the world's largest Certificate Authority providing free TLS certificates to 430 million websites.
If you have a use case for Divvi Up contact our team to learn more about a paid pilot or pricing on our production environments.
Divvi Up works for any data that can be collected across a population, like telemetry, survey results, or many other scaled metrics collection use cases.
Metrics are fed into a library where they’re divided into two shares (Divvied Up!). The shares are then encrypted locally, before any data leaves the device.
With two separate servers, each with only a partial share, it's impossible to deduce the whole metric. After validating the input, each server performs additional de-identification and aggregation.
Each server sends its partial aggregate metric to a collector, which finalizes the privacy-preserving computation of a wide array of aggregation functions (not just sum).
App owners gain access to a useful array of aggregate metrics to better understand their application or how users interact with it.
Divvi Up makes it possible to gain insights about your population of users without compromising individual privacy. Mitigate compliance risks, eliminate the need to store PII for telemetry, and respect your users’ privacy.
Divvi Up is a privacy-respecting telemetry service brought to you by the nonprofit Internet Security Research Group (ISRG), which operates the Let's Encrypt and Prossimo projects. Read all about our nonprofit work this year in our 2025 Annual Report.
548 Market St, PMB 77519San Francisco, California 94104-5401
Send all mail or inquiries to:PO Box 18666, Minneapolis, MN 55418-0666, USA