Post-quantum · ML-KEM-768 · ML-DSA-65 · Rolling out
Encrypted from physics up.
Messages end-to-end by default. Post-quantum built and rolling out. Your conversations stay on your device — by architecture, not by promise.
Messages end-to-end encrypted by default
ECDH (P-256) key exchange + AES-256-GCM on every conversation, on every platform. No flag to flip, no upgrade tier. (Call audio is a separate transport — see below.)
Post-quantum cryptography — built, rolling out
Saj Protocol V2 — hybrid post-quantum stack: ML-KEM-768 key encapsulation + Triple Ratchet + Hybrid signatures (Ed25519 + ML-DSA-65). Built and shipping in the app today; not yet the default encryption scheme for every conversation.
Call audio: relayed, not yet end-to-end encrypted
Voice and video call audio passes through our relay servers to connect participants. End-to-end encrypted calling is on our roadmap and not live today — we say so here rather than claim it.
Conversations stay on your device
Server holds encrypted blobs only. No plaintext ever leaves your device unless you choose to share.
Selective Disclosure
Share only the part of a message that matters — without revealing the rest. Built-in, no extra steps.
No phone number required
Sign up with email, hardware key, or anonymously. Your identity is your choice.
Private contact discovery
Find contacts without exposing your address book to the server.
Self-hostable on enterprise tier
Run the entire Saj Link stack inside your VPC. Federation across self-hosted instances.
Audit logging mapped to SOC 2 + ISO 27001
30 audit-action types. GDPR data export and right-to-erasure built-in.
Confidential and Managed rooms (coming)coming
Two honest room classes: Confidential — full E2EE, no server-side AI — and Managed — organisation-held keys and a compliance archive for regulated teams. Slack is not E2E. WhatsApp is not a team product. Signal has no admin. We are building both, honestly labelled.
Sovereign by architecture, not by promise.
Free to start. Self-hostable on enterprise tier.