Two worlds, yours by design.Personal / Professional spaces · Planned closed beta · Q1 2027

Most of this page is still in English. Its Kugg text is being written.

Features · Build your beta request

Choose the features.
Shape both worlds.

Browse the 178 capabilities planned for sha.chat, select the ones that matter for personal life or work and send them with your beta request. Your selection shapes beta prioritization and the invitation you receive.

Request the beta ↗See the product →

The interactive preview needs JavaScript.

preview · sample

Planning catalog

Every capability ships only when its security, reliability and compliance gates pass. Selecting a feature records interest; it is not a delivery commitment.

Search features

0 of 178 selected ·

Core messaging

Encrypted conversations, delivery and attachments. · 16 features

End-to-end encrypted 1:1 messagingMessages readable only by conversation participants.messaging-01End-to-end encrypted group messagingGroup threads with per-member key management.messaging-02Idempotent send with delivery statesSent, delivered, read and failed states per message.messaging-03Offline queue and retryMessages queue on-device and send when connectivity returns.messaging-04Message ordering guaranteesDeterministic ordering policy across devices and reconnects.messaging-05Encrypted attachmentsFiles encrypted client-side before upload.messaging-06Attachment size and type validationPolicy-driven limits on what can be shared.messaging-07Expiring attachment accessTime-limited object access for shared files.messaging-08Safe media previewsPreviews rendered without leaking content to third parties.messaging-09Disappearing messagesPer-conversation expiry timers.messaging-10Message editing and deletionEdit or retract messages with a visible history marker.messaging-11Reactions and repliesEmoji reactions and quoted replies inside threads.messaging-12Full-text search within a containerSearch messages without crossing container boundaries.messaging-13Minimal-metadata push notificationsNotification payloads carry no content or contact graph.messaging-14Multi-device message syncConsistent history across registered devices.messaging-15Conversation exportUser-initiated export of a conversation in a portable format.messaging-16

Personal container

Your people, your policies, private by default. · 14 features

User-owned personal contact listContacts belong to the user, not the platform.personal-01Contact blocking and aliasesBlock, mute or rename contacts privately.personal-02Private-by-default settingsNew personal conversations start with the strictest defaults.personal-03Personal data export and deletionSelf-service export and erasure of personal container data.personal-04Personal wallet scopeA wallet scope that never inherits corporate policy.personal-05Personal LLM contextModel memory and retrieval limited to personal data.personal-06Family and close-contact groupsSmall trusted groups with simplified controls.personal-07Contact discovery without address book uploadFind contacts using hashed, consent-based lookup.personal-08Personal identity handleA sha.chat handle that resolves to your personal identity.personal-09Cross-container destination warningExplicit confirmation before acting outside the personal space.personal-10Local-first personal archivePersonal history stored encrypted on the device.personal-11Personal notification profileSeparate quiet hours and alert rules for personal contacts.personal-12Personal container retention policyUser-controlled retention independent of any employer.personal-13Personal backup and restoreEncrypted backup keyed to the user's own recovery material.personal-14

Professional container

Governed workspace with corporate policy. · 16 features

Verified professional directoryManaged corporate contacts scoped to the workspace.professional-01Managed contact allow and block rulesOrganization-defined rules for who may be contacted.professional-02External-contact warningsVisible warning before messaging outside the organization.professional-03Permitted external domainsAllowlist of external domains reachable from the workspace.professional-04Tenant boundariesStrict separation between workspaces on shared infrastructure.professional-05BYOD policy supportProfessional container usable on personal devices under policy.professional-06Retention policy per workspaceOrganization-defined retention for professional messages.professional-07Legal holdPreserve conversations under legal hold without user deletion.professional-08Administrator audit trailImmutable record of administrative actions.professional-09Role-based access controlWorkspace roles with least-privilege permissions.professional-10Policy version receiptsEach action records the policy version in force.professional-11Persistent container identity indicatorThe active container is always visible in the UI.professional-12Transaction thresholds and review stepsCorporate approval workflows for value movement.professional-13Workspace signing permissionsWho may sign or send on behalf of the organization.professional-14Scoped AI access per workspaceProfessional LLMs receive only authorized tools and context.professional-15Cross-container isolation testsAutomated checks that data cannot leak between containers.professional-16

Calls and VoIP

Voice and video that stay with the conversation. · 17 features

Private 1:1 voice callsEncrypted voice calls started from the conversation.calls-01Private 1:1 video callsEncrypted video with the same identity context as the chat.calls-02Complete call-state UIRinging, connected, reconnecting, held, degraded, missed and ended states.calls-03Authenticated STUN and TURNMedia relay with authenticated access and abuse limits.calls-04Codec negotiation and relay fallbackAutomatic fallback when direct connectivity fails.calls-05Network handoverCalls survive Wi-Fi to cellular transitions.calls-06Audio routing and BluetoothSpeaker, earpiece and headset routing on mobile.calls-07Proximity and permission handlingCorrect behavior for sensors and OS permissions.calls-08Background and foreground call continuityCalls continue while the app is in the background.calls-09Call notificationsIncoming call alerts with identity and container context.calls-10Reconnect and packet-loss resilienceMeasured join time, jitter and reconnect targets.calls-11SRTP media encryptionSecure real-time transport for audio and video.calls-12Call metadata minimizationOnly what is needed to route the call is retained.calls-13Group voice callsMulti-party audio via a selective forwarding unit.calls-14Group video callsMulti-party video with per-participant security review.calls-15Screen sharingShare a screen inside a professional call.calls-16Call history in the conversationCalls appear as events in the thread they started from.calls-17

Wallet and settlement

Self-custody value transfer inside the thread. · 16 features

Self-custody walletUser-controlled keys; the platform never holds funds.wallet-01Hardware-backed key storageKeys stored in secure hardware where the device supports it.wallet-02Explicit transaction reviewRecipient, network, asset, amount, fees and intent shown before signing.wallet-03Send value inside a conversationTransfer initiated from the chat with a verified counterparty.wallet-04Request value inside a conversationAsk for a payment as a reviewable action in the thread.wallet-05Bilateral payment channelsZakana channel updates between known counterparties.wallet-06Net settlement through licensed fiat partnersFiat-first settlement with regulated PSPs.wallet-07Verified transaction receiptsSigned, immutable receipts attached to the conversation.wallet-08Personal and professional wallet scopesWallet permissions that cannot cross containers.wallet-09Corporate transaction policyLimits and approvals enforced on professional wallets.wallet-10Spending limits and cooling-offUser or organization defined limits on outgoing value.wallet-11Wallet recovery workflowRecovery keyed to user-held backup material.wallet-12Compromised-device responseRevoke device capabilities without losing settlement rights.wallet-13Invoice and settlement in one threadFreelance and B2B invoicing with explicit review.wallet-14Cross-border remittance channelsPairwise channels with regulated cash-out.wallet-15No native token, no public chainValue movement without gas fees or seed phrases.wallet-16

Transactional agents

Scoped delegation with explicit human review. · 13 features

Agent-prepared transfersAgents draft transactions; humans approve them.agents-01Wallet question answeringAsk an agent about balances, history and pending actions.agents-02Least-privilege agent verbsAgents receive only the actions they need.agents-03Transaction simulation before executionDry-run of any agent-initiated action.agents-04Agent spending limits and expiryDelegations bounded by amount and time.agents-05Agent delegation revocationInstantly revoke an agent's capabilities.agents-06Immutable agent receiptsEvery agent action recorded with model, policy and result.agents-07Agent-to-agent workflowsAuthenticated agents coordinate across counterparties.agents-08Capability negotiation between agentsAgents agree on scope before acting.agents-09Replay defense for agent actionsNonces and expiry prevent repeated execution.agents-10Human approval policyConfigurable approval steps before side effects.agents-11Agent sandbox modeTest agent workflows with no real value.agents-12Agent activity log in the conversationAgent actions visible in the thread they affect.agents-13

Chat LLM built-ins

Models that respect container boundaries. · 15 features

LLM answers inside the threadAsk a model without leaving the conversation.llm-01Per-container model contextModel memory follows the active container only.llm-02Separate personal and professional retrievalRetrieval indexes that never mix containers.llm-03Context leakage testsAutomated tests that models cannot cross container boundaries.llm-04Clear opt-in for AI featuresNothing is sent to a model without consent.llm-05Prompt redactionSensitive fields removed before a model sees them.llm-06Vendor retention controlsModel providers cannot retain or train on private content.llm-07No silent training on private contentExplicit policy and evidence, not a promise.llm-08Prompt-injection defensesUntrusted content is isolated from instructions.llm-09Allowlisted tools with schema validationModels call only approved, validated tools.llm-10Rate and amount limits for model toolsBounded side effects for tool calls.llm-11Review before side effectsHuman confirmation before a model changes state.llm-12Model and policy version receiptsEach answer records the model and prompt policy used.llm-13AI inventory and disclosureUsers know which models are used and why.llm-14Human oversight controlsAbility to pause or override model behavior.llm-15

Identity and cryptography

Post-quantum identity, keys and recovery. · 16 features

One handle for messages, calls and valueA sha.chat handle resolves to one cryptographic identity.identity-01ML-DSA-87 signaturesPost-quantum signatures for records, receipts and the wallet gateway.identity-02ML-KEM-1024 key establishmentPost-quantum session key exchange for every conversation.identity-03SLH-DSA backup keyOptional cold-recovery public key.identity-04Hardware-backed root secretsRoot keys remain in secure hardware.identity-05Scoped per-device capabilitiesEach device holds narrow, expiring delegations.identity-06Device registration and revocationAdd and remove devices with immediate effect.identity-07Short-lived sessionsSessions expire and rotate automatically.identity-08Step-up authenticationExtra verification for sensitive actions.identity-09Passkeys and MFAPhishing-resistant account authentication.identity-10Key rotationRegular rotation of messaging and session keys.identity-11Cryptographic agilityAlgorithm-tagged keys ready for parameter revisions.identity-12Identity recovery policyUser-controlled recovery without platform custody.identity-13Versioned E2EE protocol with test vectorsPublished protocol versions and conformance vectors.identity-14Isolated ZVM node executionSensitive execution separated from the mobile client.identity-15Independent cryptographic reviewExternal review before general availability.identity-16

Privacy and compliance

Data minimization, retention and user rights. · 15 features

Data inventory and lawful basisDocumented processing with a recorded legal basis.privacy-01Records of processing (RoPA)Maintained processing register.privacy-02DPIA supportImpact assessment evidence for high-risk processing.privacy-03Retention and deletion enforcementAutomated retention with verified deletion propagation.privacy-04Subject-rights workflowAccess, export and erasure requests handled end to end.privacy-05Consent managementVersioned consent with an audit trail.privacy-06Anonymous funnel analytics onlyNo email, IP or cross-session identifier in analytics.privacy-07No advertising or data licensingBusiness model excludes attention monetization.privacy-08Data processing agreementDPA and subprocessor list for enterprise customers.privacy-09Security schedule for enterpriseContractual security commitments.privacy-10WCAG 2.2 AA accessibilityAccessible web and mobile experiences.privacy-11Regulatory assessment for value movementMiCA, PSD2, AML and KYC duties assessed before launch.privacy-12Evidence-backed public claimsEvery security or performance claim maps to evidence.privacy-13Responsible disclosure programPublished security contact and disclosure process.privacy-14Incident response and notificationDetection, triage, revocation and user notification.privacy-15

Apps and platforms

PWA, Android, iOS and desktop clients. · 15 features

Installable progressive web appManifest, icons and install experience.platform-01Service worker with versioned cacheRestricted scope, update prompt and rollback.platform-02No sensitive data in general cachesKeys, tokens and content never enter shared caches.platform-03Encrypted IndexedDB offline dataOffline storage only after threat review.platform-04Strict CSP, HSTS and framing controlsHardened web security headers.platform-05Android appNative Android client with profiling for low-end devices.platform-06Signed Android releases with provenanceChecksum, SBOM and signed provenance on sha.chat/download.platform-07App integrity attestationServer-verified device integrity signals.platform-08Minimum-version enforcementStale clients are blocked from sensitive actions.platform-09iOS appNative iOS client with hardware-backed keys.platform-10Desktop clientDesktop application with local signing.platform-11Battery and performance budgetsStartup, memory, CPU and network targets per device class.platform-12Crash-free session targetsMonitored reliability goals for mobile clients.platform-13Web performance targetsLCP, INP and CLS budgets for the web app.platform-14Multi-language interfaceLocalized UI for supported markets.platform-15

Administration

Tenant controls, audit and enterprise operations. · 12 features

Tenant policy engineCentral definition of workspace rules.admin-01Admin consoleManage users, policies, devices and audit from one place.admin-02Separate dev, stage and prod environmentsIsolated identities, keys and data per environment.admin-03Production access with MFA and approvalTwo-person control for sensitive operations.admin-04Deny-by-default backend rulesPer-container authorization tested in CI.admin-05Structured logs without contentObservability with no message, contact or wallet data.admin-06Alerting and health checksOperational monitoring across services.admin-07Encrypted backup and restore testsRegularly exercised recovery procedures.admin-08Regional failure planDocumented response to regional outages.admin-09Quarterly access reviewLeast-privilege reviews for staff and integrations.admin-10Compliance export moduleRegulator-grade export of channel history.admin-11Beta feature flags per workspaceEnable capabilities for specific tenants.admin-12

Developers and integrations

APIs, SDKs, webhooks and ZVM access. · 13 features

Versioned public APIStable, documented REST endpoints.developer-01Client SDKSDKs for web and mobile with no access to node secrets.developer-02Webhooks for conversation eventsServer-side notifications for authorized integrations.developer-03Sandbox transaction simulatorTest settlement flows with receipts and idempotency.developer-04API quotas and rate limitsPer-integration limits with clear error semantics.developer-05B2B identity and API tierPaid node access for enterprise counterparties.developer-06ZVM read-only testnet statusObserve network status from the app or API.developer-07ZVM testnet transaction submissionUser-reviewed submissions through a scoped SDK.developer-08Bot and integration accountsNon-human identities with scoped capabilities.developer-09Single sign-on for workspacesSAML or OIDC login for professional containers.developer-10Directory sync (SCIM)Automated user provisioning from the corporate directory.developer-11Open cryptographic coreAuditable source for the cryptographic components.developer-12Conformance test suitePublic vectors for protocol implementers.developer-13

No features match that search.

Request the beta

Send your selection.

Tell us where to send the invitation. You can request access without selecting any features, and returning with a new selection updates the earlier request.

Organization (optional) Email address

No features selected yet — you can still request access.

No spam. Product updates and beta invitations only.

Choose the features.Shape both worlds.

Send your selection.

Choose the features.
Shape both worlds.