Invisible by default
When something is meant for you or your family, the network is cryptographically forbidden from even advertising that the data exists. People outside your circle cannot route it, read it, or discover it.
Consent you can take back
You are named in the claims made about you, so you can withdraw them at the wire level. A withdrawal starts a deletion clock the network watches.
Built to outlast quantum computers
Encryption is post-quantum by default, so a store-now, break-it-later attack fails.
This page is growing.
The full mechanism lives in the architecture summary. You can check the guarantees for yourself on the verification page.
See how it is verified →