Concepts

Privacy and encryption

What travels sealed, what OpenPulse can see, and where data leaves our edge.

OpenPulse moves data; it is built so that it cannot read the parts that matter. What that means depends on the surface.

What travels sealed#

Direct messages between OpenPulse identities use the Signal protocol, and groups use MLS. Keys live on people’s devices; the relay stores and forwards ciphertext. Passkeys never leave the device.

What we can see#

To run the service we see metadata: which realm a stream belongs to, how many events it carries, their sizes, and when. That is what we count for usage. Streams your app does not seal (for example plain chat or AI tokens you publish without encryption) are readable by the relay while it carries them. Seal them if they are sensitive.

Where data leaves our edge#

Some products have to reach networks we do not run: email goes to other mail servers, phone calls and SMS to carriers, payments to a blockchain. Those paths are marked in each product page. Everything else stays on infrastructure run by AUVY GmbH in the EU.