X3DH & Double Ratchet E2EE
Curve25519 identity and pre-keys, Ed25519 signatures, per-message forward secrecy, and 60-digit safety number verification.
Platform Capabilities
End-to-end encryption, institutional memory, governed broadcasting, and self-hosted control plane operations.
Multi-Vault Storage Isolation
Independent encrypted SQLite databases per vault, isolated media caches, and cryptographic selective wipe with signed device receipts.
Action Hub & Institutional Memory
Convert channel discussions into immutable decisions, trackable follow-up tasks with due dates, and pinned operational references.
Verified Broadcasts & Quizzes
Priority circulars with targeted delivery, mandatory digital acknowledgement, comprehension quizzes, and CSV compliance export.
Signed Policy Engine & DLP
28 runtime policies signed with Ed25519, dynamic screen watermarks, copy/share restrictions, and monotonic-clock offline wipe.
On-Premise SSO & Audit Chain
Docker Compose deployment, OIDC/SAML/LDAP directory sync every 15 minutes, Separation of Duties, and SHA-256 tamper-evident logs.