Prismaraby SovSec

Team chat the server can't read.

Prismara Talk is SovSec's replacement for Microsoft Teams, for the web and desktop. Messages are encrypted and signed on each device, so the server stores only ciphertext and cannot read or forge conversations. Meetings and calling follow in a later phase.

Capabilities

What Prismara Talk does

Rooms and direct messages

Group rooms and one-to-one conversations, with files kept inside the room they were shared in.

Device approval

A new device stays pending until a device you already use approves it, after you compare a short code on both screens.

Recovery

A recovery code restores access if you lose every device, and any reset is visible to your contacts.

Organisation key log

A hash-chained log of every device key and approval, checked by each client before it shares keys.

Organisation isolation

Directories, rooms, devices and key logs are separated per organisation.

Coming next

Message editing, reactions, threads and mentions, then calls and meetings on SovSec's own media servers.

Security

How it's secured

Prismara Talk follows the engineering rules shared across the suite, plus these product-specific measures.

Server can't read or forge

The server holds only ciphertext, signatures, wrapped keys and routing data.

Signed per device

Every message and key exchange is signed by the sending device, and keys never leave it.

Moving to MLS

The prototype's encryption layer is being replaced by the Messaging Layer Security standard with post-quantum key exchange.

Tamper-evident audit

Room and admin events are written to a hash-chained audit log.

Want SovSec to run it for you?

SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.

Prismara

Sign in to your workspace

or

Administrators use Admin login. Microsoft sign-in is available where your organisation runs in Microsoft or Hybrid mode.

Prismara Admin Console

Administrator sign-in

Hardware security key required
Separate session from your user account
Every action recorded in the audit trail

Not an administrator? Use User login.