Every component is open-source and publicly auditable. Versions,
hostnames and network layout are not published — a transparency page is
not an attack map.
The application
| Component |
License |
| docassemble — interview engine | MIT |
| docassemble.NJForms — this site's form package | MIT |
| Python | PSF |
Web serving
| Component |
License |
| nginx — web server | BSD-2-Clause |
| uWSGI — application server | GPL-2.0 (linking exception) |
| Flask — web framework | BSD-3-Clause |
| Jinja2 — templating | BSD-3-Clause |
Data layer
| Component |
License |
| PostgreSQL — session database | PostgreSQL License |
| Redis — cache and locks | AGPL-3.0 / RSALv2 |
| SQLAlchemy — database access | MIT |
| cryptography — session encryption | Apache-2.0 / BSD |
PDF machinery
| Component |
License |
| pdftk-java — form filling | GPL-2.0 |
| pikepdf / qpdf — PDF surgery | MPL-2.0 / Apache-2.0 |
| pdfminer.six — field survey | MIT |
| reportlab — PDF generation | BSD-3-Clause |
| LibreOffice — document conversion | MPL-2.0 |
Platform
| Component |
License |
| Ubuntu LTS — container OS | various (free software) |
| Docker — container runtime | Apache-2.0 |
| cloudflared — Cloudflare Tunnel | Apache-2.0 |
What is deliberately not here
No analytics library, no ad network, no tracking pixel, no third-party
font or CDN script, no AI service in the request path. Forms are generated
ahead of time by scripts, not by a model answering live — your answers are
never sent to any AI or third-party service.
← How this works & your privacy
· All forms