Built so we can’tread your messages.
Trust in zendtru doesn’t depend on trusting zendtru. The service is designed so we never hold what we don’t need.
Who is the customer?
Customers sign in with myID, the Australian Government’s Digital ID. We keep a one-way fingerprint of that identity, never a name or an identity document.
Who sent the message?
Every organisation passes a manual review before it can send. Each message is signed with the organisation’s own key, so its origin can be checked.
Did they agree to connect?
An organisation can only reach a customer who has accepted the connection. Either side can end it.
Who can read it?
Only the organisation that sent it and the customer it was sent to. Messages, attachments, shared details and support conversations are encrypted before they reach zendtru.
What if a phone is lost?
Each device holds its own key. On iPhone, that key is unlocked with Face ID or Touch ID. If a phone is lost, remove it from any of your other signed-in devices and it stops receiving messages at once.
What we can and can’t see.
zendtru can see
- Which organisation sent a notice
- The customer’s reference with that organisation
- When it was sent, delivered and opened
- The size of any attachment
zendtru can’t see
- The title or contents of a notice
- Attachments
- Customer names and personal details
- Support conversations
Established cryptography, applied carefully.
Messages are encrypted with AES-256-GCM, and keys are exchanged with X25519. Every device receives its own encrypted copy, so removing a device never exposes the others.