Architecture
Four layers. One direction of trust.
People use the apps. The message is sealed before it moves. Your servers deliver it. Your directory and security tools decide who is allowed to be there.
- AppsAndroid, iPhone, Windows and Mac. The conversation starts here.
- Encrypted transportSealed on the device before anything is sent.
- Your serversDelivery, policy and sealed storage. Not a place we operate for you.
- Your controlsDirectory, single sign-on, device management, HSM and SIEM.
Nothing in the lower layers is asked to read what the upper layer sealed. Policy can refuse a sender, a device or a file type. It does that without opening the envelope. The same shape is what you install on-premise and what you install in a private cloud you own.