Encrypted messaging and file transfer for firms where confidentiality is the engagement. The message content on our servers is ciphertext we cannot read — even when compelled.
The product
An ordinary messaging app to use, with a key that never leaves the device underneath it.
A fresh key per message, so compromising one does not unlock the thread.
What lands on our servers is ciphertext. A court order produces exactly that.
The file is protected the moment it exists, not once it reaches a server.
Email, WhatsApp, a shared drive — the channel no longer decides the security.
They hold the only key. Forwarding the file forwards nothing readable.
No public directory, no browsing, no way to learn that another client exists.
No portal account with your firm, no password for them to lose.
The iPhone app is free, and a client joining your matter needs no subscription of their own. Your firm's plan covers them.
Until your firm grants it, an invited client holds nothing readable — not even the title of the case.
An account is not tied to a personal identifier, so it cannot be looked up by one.
TruCrypt Staff is on the Mac App Store now. Customers, cases and threads on the machine your team already uses all day.
Only the people assigned to that case can read it — including within your own firm.
Find the conversation without leaving the encrypted environment it lives in.
Assigning staff to matters moves to a web console next. It will never touch message content.
Security
Your private key is generated on your device and never leaves it. We hold no key, which is not a policy we could quietly change — it is what the system is.
We do keep the metadata needed to deliver a message — who it is for, when, and which conversation. We never sell it, and that is the whole list. If a vendor tells you they hold nothing at all, ask how the message gets delivered.
Try it here
Type anything on the left. The right-hand pane is what would reach our servers — encrypted in your browser with AES-256-GCM, the same cipher the app uses. Nothing you type here is sent anywhere.
A message you would not want on a consumer messenger.
Why not Signal, or WhatsApp
Consumer messengers optimise for reach. A firm needs the opposite properties.
| Consumer messengers | TruCrypt | |
|---|---|---|
| Reading message content | ✗Encrypted on the better ones — but the platform still holds the account and the graph. | ✓Your private key never leaves your device. We hold no key. |
| Identity | ✗A phone number ties the account to a person at registration. | ✓No phone number required. |
| Discoverability | ✗Anyone holding a number can find or message your client. | ✓No public directory. Clients siloed to their own matter. |
| A legal request to the vendor | ✗Yields whatever the platform holds, under their jurisdiction. | ✓Yields ciphertext and limited delivery metadata. Never content. |
| Professional duty | ✗Not designed around privilege or fiduciary duty. | ✓Built for them; designed to support NIS2, DORA and GDPR obligations. |
| Where it runs | ✗Their servers, their terms — which can change. | ✓Our infrastructure, or your own servers on the enterprise tier. |
Pricing
What a firm pays depends on how many people are in it and how many matters are open. We're setting that with a small number of founding practices rather than guessing at a number.
A fixed founding rate that doesn't move when we finish, and a direct line to the engineers building it.
Tell us the shape of your practice — team size, matter volume, and what you're using today. We'll come back with a number and an honest read on whether it fits.
Request firm pricingA reply within one business day, from an engineer.
The app is free to download and the plan is chosen inside it, whenever you're ready. Nothing to arrange with us.
Not for your clients. A client you invite to a matter installs the same app for free and needs no plan of their own — these are for people using TruCrypt for themselves.
Download the app free, then choose a plan inside it whenever you're ready — the subscription is handled by Apple, not by us. Firm workspaces are not sold through the App Store.
Questions
No. Message content is end-to-end encrypted with RSA-3072 and AES-256-GCM. Your private key is generated on your device and never leaves it, so we hold no key to decrypt anything. A court order, regulator or attacker can obtain ciphertext and limited delivery metadata — never readable content.
Both apps are live today: the iPhone app your clients use, and TruCrypt Staff on the Mac App Store for your team. A web console for administrators is still in development — we would rather say that plainly than sell you a roadmap as a product.
On the firm workspace tier, organisational recovery is held by your own administrators, so your firm can always recover its own records for continuity or legal hold. TruCrypt never can, on any tier.
No. We build no advertising or behavioural profiles. We keep the limited metadata needed to deliver messages, and we never sell it. Our only revenue is subscriptions.
TruCrypt's end-to-end encryption and data minimisation are designed to support obligations under those frameworks, and the enterprise tier lets you keep the infrastructure in your own jurisdiction. It is a control that supports compliance — not a certification, and we won't describe it as one.
No. The iPhone app is free to download, and a client you invite to a matter needs no subscription of their own — your firm's plan covers their access. The paid personal plans are for individuals using TruCrypt for themselves, not for your clients.
They install one app and accept an invitation. There is no account to create with your firm and nothing for them to configure. Most of the work is on your side, and it is measured in minutes per matter.
Who builds it
Serial entrepreneur with 15+ years in IT and cybersecurity and multiple exits. Leads strategy, operations and go-to-market.
Senior engineer with 10+ years building and scaling production systems. Architects the encryption infrastructure and platform.
Startup founder and technology leader with multiple ventures and acquisitions across AI and cloud.
Get started
Fifteen minutes, screen shared, using a case that looks like yours. We'll tell you honestly whether it fits — including when it doesn't yet.
No sales sequence. A reply within one business day, from an engineer.
Or download the apps