Messages and calls that only the right people can read.
Amana is end-to-end encrypted. Your organisation runs its own private instance and decides who joins. Your keys are created in your phone’s security chip and never leave it.
Amana is for members of organisations. Already have a QR code from your administrator? Open the app and scan it.
Check who you are talking to
Every contact has a seal made from their keys. Compare it once, and Amana warns you if it ever changes.
4be1 07c9 a2d5 e83f4be1 07c9 a2d5 e83f91c4 d2e8 0b3a 77f6The seals match. You are talking to Karim.
The seals differ. Karim’s key changed, so sending is blocked until you check with him.
What Amana guarantees
Nobody in the middle
Messages, attachments and calls are encrypted end to end. The server, the company hosting it and Amana-App cannot read or hear them.
Keys that cannot leave the phone
Keys are created in the iPhone Secure Enclave or the Android security chip. They cannot be copied, even from a compromised phone. The key exchange is hybrid post-quantum, so what is recorded today stays unreadable later.
You decide who joins
An administrator of your organisation enrols each person and each phone by QR code, signing with a hardware key. Your host cannot add anyone, and neither can we.
Calls that ring on a locked phone
Answer from the lock screen. Group calls are encrypted the same way.
No Google on Android
Notifications come from a server in your own instance. On iPhone, notifications never contain message content.
Three steps to your first message
Your administrator creates your account
In the web portal, signing with a hardware key. The portal shows an activation QR code.
You scan it
Amana checks that the instance is genuine, and your phone creates your keys in its security chip. It takes a few seconds.
You compare seals once
Meet a colleague, compare your seals and mark them verified. If a seal ever changes, Amana blocks sending until you check.
Your organisation, your instance
Hosted by your telecom operator
Your operator runs the server and the infrastructure you already contract with. Messages stay private. The operator can see who talks to whom, and when.
On your own premises
Your IT team runs the server. Everything stays under your control, including those traces.
The same app, the same protection for what you say. The choice is who can see the traces.
Built on open standards: MLS (RFC 9420), ML-KEM-1024 with P-384, AES-256-GCM, ECDSA P-256, and SFrame (RFC 9605) for calls.