Post-quantum · ML-KEM-768 · ML-DSA-65 · Rolling out
Messages end-to-end by default. Post-quantum built and rolling out. Your conversations stay on your device — by architecture, not by promise.
ECDH (P-256) key exchange + AES-256-GCM on every conversation, on every platform. No flag to flip, no upgrade tier. (Call audio is a separate transport — see below.)
Saj Protocol V2 — hybrid post-quantum stack: ML-KEM-768 key encapsulation + Triple Ratchet + Hybrid signatures (Ed25519 + ML-DSA-65). Built and shipping in the app today; not yet the default encryption scheme for every conversation.
Voice and video call audio passes through our relay servers to connect participants. End-to-end encrypted calling is on our roadmap and not live today — we say so here rather than claim it.
Server holds encrypted blobs only. No plaintext ever leaves your device unless you choose to share.
Share only the part of a message that matters — without revealing the rest. Built-in, no extra steps.
Sign up with email, hardware key, or anonymously. Your identity is your choice.
Find contacts without exposing your address book to the server.
Run the entire Saj Link stack inside your VPC. Federation across self-hosted instances.
30 audit-action types. GDPR data export and right-to-erasure built-in.
Free to start. Self-hostable on enterprise tier.