e2eeHosted in the EU · end-to-end encrypted · open sourceHosted in the EU · open source
Enclessa is a hosted workspace for organisations that need confidentiality, functional depth and European data protection at the same time: encrypted messaging, video calls, task boards, time tracking and personnel records on one permission model. You create a workspace; we run the infrastructure.
Free for 14 days. No payment card to start.
incident-2026-08
12 members · linked to Incidents board
Ines KernIncident lead09:41
Gateway node 3 dropped every socket at 09:12. Sessions resumed on 1 and 2 without message loss — the outbox held.
Tobias RufPlatform09:43
Confirmed. Reconnect p95 was 1.8 s. I pinned the graph and opened a card on the board.
Gateway 3 — socket drop on redeploy
Incidents · In review · #1284
Marta LindqvistCompliance09:47
For the record: this room is managed, so the export for the post-incident review is already covered.
4 replies in thread
Managed room — the server can read this, search it and export it.
Open-source infrastructure you could audit yourself
Enclessa is a European collaboration platform, delivered as a hosted service at your-team.enclessa.app. It combines team messaging with channels and threads, end-to-end encrypted direct messages using MLS per RFC 9420, video calls with screen sharing, and four optional modules — task boards, GitHub sync, time tracking and personnel records — all on one permission model. The software is open source under AGPL-3.0, so its architecture can be reviewed rather than taken on trust, and every organisation can export everything it holds at any time.
Direct messages are end-to-end encrypted with MLS per RFC 9420, one key per device. The server runs delivery and holds no key, so there is no administrator override to trust and no escrow to discover later.
How the encryption worksThreads, search, files, calls, boards, GitHub, time tracking and personnel records — the work and the conversation about it in one place, sharing one permission model instead of four invitation lists.
Everything includedHosted in the European Union by a German seller, open source under AGPL-3.0, with a documented data model, an OpenAPI surface and a full export. Leaving is an operation, not a negotiation.
Security and data protectionConfidentiality, functional depth and control of where the data sits are usually on offer two at a time. This is what it takes to have all three without running the servers yourself.
e2ee · what the server stores
8f2a c471 9b03 ee5d 1a77 3c90 b6f2 40ad 77c1 e0b9 5d34 aa18 92ef 0c6b
epoch 41 · leaf 3 of 7
managed · what the server stores
“Ward round moved to 14:00 — the export for the review is already covered.”
indexed · retention 5 y
End-to-end encryption and server-side search are physically mutually exclusive, so Enclessa makes the trade-off a visible product decision rather than a footnote. Direct messages are always encrypted; channels are managed, so they can be searched, retained and exported. The room says which it is.
Direct messages are e2ee. No administrator override.
Laptop
leaf
Phone
leaf
Desktop
leaf
One MLS group per conversation, one leaf per device, through OpenMLS — the audited implementation, compiled once in Rust and shipped to every client. We run the delivery service and hold no keys.
RFC 9420 · forward secrecy · post-compromise security
One-to-one and group calls on LiveKit with screen sharing, a lobby, host controls and in-call chat, started from the room you are already in. In encrypted rooms the media is encrypted end to end too, which is why recording is not offered there.
Designed for 50 participants per media node
Triage
Rate-limit the invite endpoint
issue
Retention job overruns
issue
In review
Gateway 3 — socket drop
issue
Board → GitHub push order
issue
Done
Encrypted attachment chunking
issue
A task board that inherits the team it belongs to and links back to the conversation the work came from. Point one at GitHub and issues become cards, pull requests attach to the card they close, and check results arrive without opening a tab.
A module. Off until you switch it on.
#incident-2026-08 · 09:41
#release-train · Tue
#general · 12 Jul
Direct · Ines Kern
Direct · Tobias Ruf
FTS5 index, encrypted at rest
In managed channels the server can read, so it does the work: full-text search over messages and file contents, retention rules, compliance export and an audit log. In encrypted rooms the same search runs on your own device against a local encrypted index.
The capability moves. It does not disappear.
Boards, GitHub, Time and People are modules of the same platform, sharing its permission model. Leave one off and it is not merely hidden — its routes do not answer at all.
Four steps, and only the first one is ours to do for you. There is no server to provision, no certificate to renew and nothing to install.
Sign up with an email address and a password. The account, the organisation and your membership are created together, and you land in a room already signed in — there is nothing to install and no server to provision.
Your workspace
Created in one transaction. Nothing to install.
Every sector draws that line in a different place, and Enclessa does not pick for you — it makes the line visible, per room. Each page below names the constraints that sector actually has.
There are no customers to quote here yet, so this band quotes the architecture instead. Every line below is traceable to a numbered section of the document the build is held to — and the security page lists what Enclessa does not have as plainly as what it does.
MLS per RFC 9420 through OpenMLS, one key per device, safety numbers for verification. Compliance in an encrypted room is only ever a recipient key visible to everybody in it — never a copy taken quietly on the server.
Architecture §3, §10
Isolation is asserted at a single choke point and proven by a generated probe suite that drives every operation the API offers as one organisation against another’s identifiers. All 203 are refused, and the suite fails the build if that ever stops being true.
Architecture §7.4
Safety number
Two devices, two humans, one number — that is what verified means here.
Not an aspiration but a licence gate in continuous integration that fails the build when a dependency changes its licence. It is why several otherwise obvious components are not in the stack.
Architecture §4.3, §20
PostgreSQL, NATS and LiveKit underneath, a documented data model, an OpenAPI surface and a full organisation export. The software is AGPL-3.0, so the exit exists even if we do not.
Architecture §7, §8
A seat is an active member of your organisation. Bot accounts, guests and deactivated people are not counted, so an integration never appears on the invoice.
For a team that wants the conversation encrypted and nothing else switched on.
€6per member / month
Billed monthly or yearly
Start free trialFor organisations running the work itself in Enclessa, not only the talking.
€11per member / month
Billed monthly or yearly
Start free trialFor organisations that also run time, absence and personnel records here.
€17per member / month
Billed monthly or yearly
Start free trialFor installations that are air-gapped, residency-bound, audited, or all three.
Custom
Annual agreement
Talk to usPrices are net of VAT. The seller is established in Germany, so German VAT is added where it applies and the reverse charge is used for valid EU VAT numbers outside Germany.
Create a workspace in a couple of minutes. It is yours at your-team.enclessa.app, hosted in the European Union, with encrypted direct messages from the first one you send.
No card required to create a workspace.