Confidentiality that outlives the vendor relationship
The obligation is to the client, and it does not lapse because a supplier was compelled or acquired. The only durable answer is that the supplier never had the content.
For a law firm the threat model includes the platform itself: a demand served on a provider should not be able to produce client conversation. In Enclessa, direct and group direct messages are end-to-end encrypted with MLS, so what a provider holds is ciphertext and an epoch number. The firm’s own operations — matter coordination, internal policy, billing discussion — run in managed channels where search and export still work, and the Time module records billable hours against clients, projects and activities.
Open betaThe platform is being built in the open, so parts of it are not there yet, behaviour changes between releases, and no availability figure is committed while it is in beta. What is still being built.
At a glance
- Client conversation
- End-to-end encrypted, no escrow
- What a subpoena of the server yields
- Ciphertext, group id, epoch, timestamp
- Matter separation
- Permission bitmask enforced in the data layer
- Billable time
- Customer → project → activity, with rates
- Hosting
- European Union
The constraints this sector actually has
Conflicts and matter separation
Who can see which matter is not a convention, it is a control, and it has to be enforced somewhere lower than the user interface.
Time is the product
Hours against a client, a matter and an activity are the invoice. Reconstructing them from memory on a Friday afternoon is how a firm loses money.
Retention runs both ways
Some files are kept for the statutory period and some must be destroyed. A platform needs to express both.
What Enclessa does about them
What that looks like on a working day
Client work with time against itA channel per client, a board for the work, and hours recorded against the project rather than reconstructed on the last day of the month.Read the use caseBoard and works-council communicationA conversation the platform operator cannot read, with no administrator override and no way to add a reader after the fact.Read the use case
Questions
Legal and advisory: common questions
What could Enclessa hand over if it were served with a legal request?
For end-to-end encrypted conversations: the ciphertext, the group identifier, the epoch number, the sending device and a timestamp. Enclessa holds no key that decrypts the content, so the plaintext cannot be produced. For managed channels the server can read the content, which is precisely why a firm puts client conversation in encrypted rooms.
Can Enclessa track billable hours?
Yes, in the Time module. Hours are recorded against a customer, project and activity with billable rates, submitted for approval and then locked so an approved period stops changing.
Does Enclessa support legal hold?
Yes, in the People module, where a hold blocks an erasure and states the reason it is blocking it. Retention rules are configured per organisation.
Encrypted collaboration, hosted in Europe.
Create a workspace in a couple of minutes. It is yours at your-team.enclessa.app, hosted in the European Union, with encrypted direct messages from the first one you send.
Open beta. Free plan, no payment card to start.