Security
Your conversations, protected.
What happens in your chats should stay between you and the people — and AI — you invited. Here’s how we protect that, in plain language.
Our approach
Security isn’t a feature we bolted on — it’s how we build. Encryption by default, least privilege everywhere, and as little of your data as the product truly needs.
How we protect your data
Encrypted in transit
All traffic between your device and AmeChat is encrypted with TLS. Realtime messaging adds a second layer built on the Noise Protocol Framework: a Noise IK handshake with Curve25519 keys and ChaCha20-Poly1305 encryption. The app ships with our server’s public key pinned — it knows exactly who it’s talking to before sending a byte — and fresh ephemeral keys give every session forward secrecy.
Encrypted at rest
Databases live on LUKS-encrypted volumes (AES-256), media storage is encrypted at rest, and backups are additionally encrypted client-side with AES-256 before they ever leave the machine.
Calls are end-to-end encrypted
The audio and video of a call are encrypted between the participants’ devices with DTLS-SRTP: the keys never leave the devices, and we cannot listen in. An emoji key shown on both screens lets you verify there is no one in the middle. Every call is relayed through our own TURN servers in the EU, so the person you are talking to never sees your IP address.
EU infrastructure
AmeChat runs on servers in the European Union, operated by a German company under the GDPR. Your media is stored under EU jurisdiction.
Zero-trust internals
Every internal service authenticates to every other with mutual TLS and short-lived credentials from a central secrets vault — issued on demand, expiring automatically. No shared passwords, no keys in code.
Least privilege, by architecture
Every service can reach only its own data — its own database role, its own queues, its own cache namespace. A compromise of one component doesn’t open the rest — and management access is locked to private networks and allowlisted addresses, never the open internet.
Built to survive failure
The database runs highly available with automatic failover, and continuous encrypted off-site backups let us restore to any point in time. Losing a server loses nothing.
Your account, in your control
Every sign-in on a new device notifies you in the app. You can see all active sessions and revoke any of them instantly, and rate limits guard against brute force.
Data minimalism
We collect what the product needs and nothing more. AI requests are processed under data-processing agreements and are not used to train models.
Found a vulnerability?
We appreciate researchers who report responsibly. Write to us — we read every report and reply quickly.