Messages, calls and files are encrypted on the sender's device and decrypted only on the recipients'. Servers, whether yours or ours, only ever see ciphertext.
No proprietary crypto. Our protocol implementation will be published for third-party audit before general availability.
Deploy on Kubernetes or VMs with Helm charts and signed images. Works on isolated networks, with offline updates for air-gapped sites.
Your own isolated instance in the region you choose. Data never leaves it, and backups stay in the same jurisdiction.
SAML 2.0 and OIDC single sign-on, Active Directory and Entra ID sync, SCIM provisioning and deprovisioning.
Retention rules, role-based admin, device verification, remote session revoke and wipe, audit logs of admin actions.
Prometheus metrics, OpenTelemetry traces and structured logs. Operational data only, never message content.
Architecture, threat model and protocol details for your security review.