Security by Design
VeraUno is built on true Client-Side Encryption (CSE) and end-to-end encryption principles. Your messages are encrypted on your device before they ever leave it. Our servers only ever receive data encryption keys and only store private keys — we never see plaintext or even ciphertext.
We have no technical ability to read your emails. Private keys never leave your control.
Client-Side Encryption: Secure by Architecture
Traditional email and many “secure” solutions encrypt data in transit or at rest on the provider’s servers. The provider can still access the content.
VeraUno takes a fundamentally different approach:
- Encryption and decryption happen exclusively on the user’s device
- Only ciphertext is transmitted and stored on our servers
- Private keys remain under the user’s control
- We cannot access the plaintext content of your messages — even if compelled
This is not a policy promise. It is an architectural guarantee. Because the encryption keys and content only come together on your device, there is simply no technical path for us (or anyone else) to read your encrypted emails.
What We Can and Cannot Access
| Data | Accessible by VeraUno? |
|---|---|
| Plaintext email content | No |
| Private encryption keys | Yes |
| Ciphertext (encrypted messages) | No |
| Account metadata & technical logs | Yes (for service operation and security) |
We deliberately designed the system so that the most sensitive data — the content of your communications — remains inaccessible to us. It should be noted that the Recipients and Subject of the outer emails (encrypted emails are encapsulated), these are visible to anyone with access to the encrypted email.
Platform & Development Security
VeraUno is built by a team with decades of experience protecting high-value financial assets. Our parent company, Endeavour 3DSecure and Digital Identity Ltd, has been developing security-critical systems since 1999.
Our flagship products deliver 3D Secure authentication for both Issuing and Acquiring institutions and are used with major card schemes including Visa, Mastercard, American Express, Diners Club, and UnionPay.
This background shapes everything we do:
- PCI DSS compliance heritage — We apply the same rigorous security disciplines required for handling payment card data
- 3DS-certified expertise — Deep experience building and operating systems that protect sensitive authentication and transaction data
- High-assurance development practices — Secure software development lifecycle, strong cryptography, careful key management principles, and infrastructure designed for resilience and scalability
- Protection of high-value assets — The same mindset used to safeguard credit card data and financial transactions is applied to the design of VeraUno
We treat the confidentiality of business communication with the same seriousness that banks and payment networks demand for financial data.
Continuous Focus on Security
Security is not a feature we added later. It is the foundation of VeraUno.
- Encryption is performed on the client before data leaves the device
- Servers are designed to handle only ciphertext
- Development and operational practices draw on long experience in regulated, high-stakes environments
- We actively monitor for abuse, suspicious activity, and malicious use of the platform
Your email. Your keys. Your privacy.