Exposure Notifications Server is an open source reference implementation developed by Google to support the COVID-19 Exposure Notifications API, designed for use by public health authorities around the world. The server provides a secure and privacy-preserving backend system that enables governments and organizations to deploy exposure notification applications for Android and iOS devices. It handles essential backend functions, including receiving and validating temporary exposure keys from users who have tested positive, storing those keys, and generating downloadable key files for mobile devices to check for potential exposure matches. The system integrates cryptographic signing for authenticity, supports configurable data retention policies, and ensures user privacy by design—no personally identifiable information is stored or transmitted. Built to be platform-agnostic, it can be deployed on any infrastructure or cloud service.
Features
- Implements the backend for the COVID-19 Exposure Notifications API
- Validates and stores temporary exposure keys from mobile devices
- Generates and signs key export files for client-side exposure matching
- Supports configurable data retention (e.g., automatic deletion after 14 days)
- Designed for privacy, ensuring no personal user data is shared or stored
- Deployable on multiple infrastructures or cloud environments