All transaction data transferred between Participant Nodes is end-to-end encrypted and only selectively shared with other Participant Nodes on a strict need to know basis. The domain operator, therefore, does not learn the transaction contents. Also, Canton guarantees the integrity of ledgers, even in the presence of malicious participants. Furthermore, any Party can extend the ledger at any time without adversely impacting others.