MLS · RFC 9420
Only those in a conversation can read it.
Ionori encrypts end to end with MLS (RFC 9420). Whoever reads along is visible as a participant, and Ionori itself can't look inside either.
What the server sees and what it doesn't
Stays encrypted
- Messages, reactions and voice messages
- Photos, files and their previews
- The sound and picture of your calls
- Title, place and notes of your appointments
- What you search for
The server sees
- Who is in a conversation with whom
- When a message was sent
- Start, end and participants of appointments
Ionori needs this to deliver messages, send notifications and show free or busy.
How Ionori protects you
MLS, an open standard
Every conversation is an MLS group. The keys change all the time and exist only on the participants' devices.
Passkeys
The Ionori ID has no password. You sign in with a passkey, and a recovery code covers emergencies.
New devices
You approve a new device by QR code with an old one. Your history comes along, encrypted with your personal key.
Visible, not secret
Parents of young children read along as visible participants who can't write. There is no master key.
Reports with proof
Whoever reports sends the messages along. Message franking proves they are genuine, without Ionori reading anything else.
In the EU
Hosted in the EU, GDPR from the start. Notifications reach your device without content.
Clear responsibility
In the Ionoriverse and in families Ionori moderates, in companies the company itself. Parents and admins get tools to take care of their part.
- Reports are handled by risk, child safety first.
- Every measure comes with a statement of reasons to the person concerned.
- Appeals are reviewed by someone other than the person who decided.
- Reports to authorities only with a second pair of eyes.
- Images in reported messages are blurred at first.
Get started with Ionori
One Ionori ID for everything, quickly set up, with a passkey instead of a password.