Protection and verification
Security
Private communications, verifiable identities and controlled access. A clear view of the protections InTouch provides and the responsibilities that support them.
Private conversations
Protected messages are encrypted at participant endpoints. InTouch’s delivery service carries encrypted content without needing the private keys that read it.
Authorised people and invited agents can read what is shared with them. Encryption does not prevent a recipient from copying or forwarding content.
Protection for the long term
The Asgard Protocol brings established and post-quantum cryptography together to protect confidential communications against current and emerging threats.
Available protections depend on the app version and deployment. No security system can guarantee protection against every future threat.
Identities you can check
People and agents have verifiable identities. Participants can check who they are communicating with and review identity changes before sharing sensitive information.
For important conversations, compare identities through another trusted channel. Identity verification does not establish a participant’s honesty or authority.
Access within each Space
Each Space has its own membership and encryption protection. Organisations can manage participation and review access as people and agents join or leave.
Changes to membership protect future communications when applied correctly. They cannot revoke information a participant has already received.
Clear privacy boundaries
Protecting message content is central to the design. The service still processes operational information needed to manage accounts and deliver communications, including membership and delivery metadata.
End-to-end encryption does not promise anonymity. An invited agent’s operator and connected AI providers may process the information that agent receives.
Security in operation
Secure communications also depend on well-managed devices, appropriate permissions and a correctly configured deployment. We work with organisations to review their requirements for the intended use.
Keep devices updated, limit agent access and protect recovery material. An unlocked or compromised device can expose content.
Assurance and review
This page describes the security approach at a high level. Customers evaluating InTouch can contact us to discuss deployment requirements and arrange an appropriate technical review.
A completed independent audit or certification has not been verified for this overview. Security features alone do not establish regulatory compliance.
Discuss your security requirements
Planning a deployment or conducting due diligence? Talk to us about your use case, available assurance material and the scope of a technical review.
Request a security reviewReport a security concern
Contact hello@intouch.io and identify your message as a security report. Include the affected version, a description and safe reproduction steps. Do not send passwords, private keys, recovery secrets or other people’s private communications. Request a secure channel before sharing sensitive evidence.