Prismaraby SovSec

Team chat the server can't read.

Prismara Talk replaces Microsoft Teams in the browser and on the desktop. Messages are encrypted and signed on each device with hybrid post-quantum keys, so the server stores only ciphertext and can neither read nor forge your conversations. Sign-in, licensing and the app launcher come from the rest of Prismara, so Talk fits straight into your tenant.

Demo with sample data at talk-demo.prismara.eu, separate from production.

Screenshots

See it working

Shown with sample data.

Chat, teams, files and calls — messages sealed on your devices

Capabilities

What Prismara Talk does

Rooms and direct messages

Group rooms and one-to-one conversations, with files kept inside the room they were shared in.

Post-quantum end-to-end encryption

Room keys are delivered with hybrid ML-KEM-768 and ECDH, and every device signs with hybrid ML-DSA-65 and ECDSA keys.

Device approval

A new device stays pending until a device you already use approves it, after you compare a short code on both screens.

Organisation key log

A hash-chained log of every device key and approval, checked by each client before it shares keys.

Single sign-on

Sign in with Prismara Identity in the browser or the desktop app; signing out centrally ends Talk sessions too.

Part of your tenant

Licences from Prismara Admin are checked on every request, and the shared app launcher takes people straight to their other Prismara apps.

Security

How it's secured

Prismara Talk follows the engineering rules shared across the suite, plus these product-specific measures.

Server can't read or forge

The server holds only ciphertext, signatures, wrapped keys and routing data.

Post-quantum transport

Connections accept only post-quantum TLS, on top of end-to-end encryption.

Fails closed

If a licence can't be confirmed, access is refused rather than allowed.

Hardened deployment

Talk runs in hardened containers, and room and admin events go to a hash-chained audit log.

Want SovSec to run it for you?

SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.

Prismara

Sign in to your workspace

or

You enter your password and second factor only on Prismara Identity's own page, never here. Administrators use Admin login.

Prismara Admin Console

Administrator sign-in

Passkey required
Separate session from your user account
Every action recorded in the audit trail
or

Continues to Prismara Admin at admin.prismara.eu. Not an administrator? Use User login.