There have been a number of third party audits and lots of academic research: https://community.signalusers.org/t/overview-of-third-party-...