A two-way call between your own people, end to end encrypted

Push-to-talk is one voice at a time and one direction at a time. Some conversations are not that shape — a supervisor walking somebody through a fault, a handover, a decision that needs both people talking. Those are calls, and between your own staff they stay encrypted.

Ask for early access See the security model

In beta. Built end to end — the signalling, the relay, the org policy gate, the call screens and the engine on the handset — and covered by tests. But no call has been placed by anyone outside our own testing yet, so we are calling it beta rather than finished.

Different from push-to-talk on purpose

The radio stays exactly as it is. A call is a separate path, so keying the mic and taking a call are not competing for the same thing.

Both people talk at once, with no floor to take and nobody waiting for a release
Voice, or voice and video, between members of your organisation
Push-to-talk keeps working — the channel does not go quiet because somebody is on a call

Encrypted between the two handsets

Unlike a telephone call, which has to leave our network for the public phone system, a call between two members of your organisation never needs to be readable by us.

Keys stay on member devices; the relay forwards frames it cannot decrypt
Video rides the same encrypted channel as the audio rather than a separate unprotected one
The server refuses to carry plaintext on a channel that is supposed to be encrypted — checked on its side, not only in the app that benefits from the guarantee

An administrator decides whether it exists

Calling is a policy question in a lot of operations, and video more so. They are separate switches for that reason.

Calls on or off for the organisation, with video as its own toggle beside it
Enforced on the relay, so turning video off stops the bytes rather than trusting the app not to send them
Defaults chosen so an organisation is never opted into something it did not ask for by an update

What is honest about the encryption

The content of a call is end-to-end encrypted. The fact that a call happened is not, and cannot be — the relay has to know who to forward frames to.

We can see that two members were on a call, when, and for how long. We cannot see or hear it
This is not the same as World Phone: a call to an ordinary telephone number leaves for the public network and is not end-to-end encrypted, and that page says so too
Version one has no forward secrecy, which is documented rather than glossed — a limitation stated is worth more than a badge

Would your crew use this?

Tell us whether the conversations that matter to you are one-to-one, one-to-many, or need video — it changes what we finish next.

Talk to us