Discretion
Built for clients whose security depends on their privacy.
A protective program produces material that would create risk if it were held carelessly. Arbiter is built so the answers to a careful buyer’s questions are structural: what can be seen, who holds the keys, and what remains when you leave.
Messages
Readable only on your devices.
Messages are encrypted on the sending device and readable only on the devices in the conversation. There is no staff account or internal tool that produces their content, and history is recoverable only with a passphrase you hold. If the passphrase is lost, the history is lost with it.
Intelligence
Encrypted per engagement, with no silent access.
Dossiers, assessments, and the notes attached to them are encrypted before they reach the database, under keys held per engagement. A stolen backup yields ciphertext, every decryption is recorded, and any use of the keys sets off alarms. No one at Arbiter can open your file quietly.
Custody
Hold the keys yourself.
Clients who prefer it hold their own encryption keys, in their own cloud account. Every decryption then asks your key and lands in your own logs. Revoke it, and the file closes to Arbiter and to anyone who serves paper on the firm.
Departure
Deletion destroys.
Deletion destroys the keys themselves, which makes the material cryptographically unrecoverable everywhere at once, backups included. What survives is a content-free record that the erasure happened, and your invoices, anonymized, so your books stay intact.
Exposure
Quiet by default.
Notifications carry no content: your phone fetches and decrypts locally, and the envelope that crosses anyone else’s infrastructure is empty.
Commitments
What Arbiter will never do.
Sell or mine your data
Client material is never sold, mined, or used to train anything. Arbiter is paid for the work it does for you.
Keep a master key
None exists for your messages, so there is nothing to compel or to leak.
Build quiet access
Where the application must read records to do its work, that access is engineered to be visible.
Retain what is not needed
Deletion is real, and what you share stays revocable.
If something matters to you and is not written here, ask.
Begin with a conversation.
Inquiries are handled directly by senior staff, and discretion applies from the first contact.
Schedule a consultation