Messages that reach who you sent them to, on infrastructure you run.

End-to-end encrypted chat and groups for an organisation, delivered by a relay the organisation operates itself. No provider, no account, no server of ours in the path.

What your relay can see

The address each device connects from
Which identity signed in, and when
Timing and volume of messages
Message size, to within a factor of four
Roughly how many contacts an identity has

We publish this list because you will be asked for it, and because a product that claims to hide everything is not telling you the truth.

What it cannot see

What any message says
Who sent a private message
Who it was sent to
Who talks to whom
That any set of messages forms a group

These hold against the relay operator, against a future quantum computer reading recorded traffic, and against anyone who takes the relay's disk.

The relay is a store, not a participant.

A relay holds sealed messages and passes them to whoever proves they may collect them. It can't open them, can't tell who sent them, and can't see who talks to whom. That is its whole job.

You run the relay. A Windows application, on a machine you own, under a jurisdiction you chose. It needs nothing from us to work, and if we disappeared tomorrow it would keep working.

To reach someone at another organisation, your device connects to their relay and drops the sealed message there. No account is needed, and the two relays never speak to each other. There is no federation to trust and no central server to depend on.

The relay console is a Windows application today. Other operating systems will follow; the relay itself is the same on all of them.

What it does

One-to-one chat

Private conversations only the two of you can read. You can confirm who you're talking to by comparing codes in person.

Groups

Team conversations. Add and remove people; someone who leaves stops seeing what comes next.

Attachments to 256 MB

Documents, photos, video. Large files that never sit readable on any server, including your own.

256 MB is the first version's limit, not the design's. It is a relay setting, and relay operators will be able to manage it themselves soon.

What it does not do, and we say so

Removing someone from a group does not take back what they already have. They keep every message they received. Rotating the key stops them reading what comes next, and that is all any messenger can offer. The app says this at the moment you remove someone, because you will assume otherwise.

A seized phone is readable with the PIN, and not without. The disk is always encrypted, the app locks, and a second PIN wipes it. But a phone imaged before any PIN is entered has everything; the wipe is visible; and there is no ratchet yet. The setup screen says all of that before you choose.

There is no account recovery. An identity is a key. Lose the key without a backup and it is gone, and there is nobody — including us — who can bring it back. The app makes you choose to skip the backup rather than letting you forget.

A relay knows its members are online. A mailbox has to know its owner. What it does not know is who they are talking to.

Removing someone is not blocking them. They lose the connection and are told exactly that. A new request from them still lands in your tray, because a block is a different act and we have not built one.

Where it stands

September 2026: Two people, two phones, two cities, one relay on a Windows machine behind a tunnel. Messages both ways. The first thing the product did outside a test rig.
v0.12.23: The protocol specification, with fourteen normative test vectors that the implementation reproduces byte for byte.
562 tests: Plus an end-to-end run of the real software that checks the relay's own logs to prove no name ever reached them.
80 findings: Places where building it found the design wrong, each on the record with the fix. We think a product whose defects are written down is safer than one whose defects are not.
256 MB: A full-size file sent and received through a real relay over the internet, both ways, before we let anyone else try.

See it on two phones.

A demonstration is the relay on a laptop, the app on two handsets, and twenty minutes. You will see what the relay's console shows — and what it doesn't.

Write to info@nsango.com