CollabNowPro · Security & architecture
Your own servers, a private mesh, an encrypted cache, the device key store and an assistant under the app's control.
ARCHITECTURE
CollabNowPro works against infrastructure your organization controls itself. Each layer limits what a single failure or attack can reveal.
Mail, appointments, contacts, tasks, notes and files live on your organization's mail server and Nextcloud. No outside platform operator stores or processes the content.
Each organization's data stays in its own systems and is not pooled with that of other customers. A flaw in one installation exposes no other.
The servers do not have to be publicly reachable on the internet. The app reaches them through an encrypted private mesh to which each device is admitted individually.
In mesh mode, the app requires a verified mesh connection and never falls back to a direct route. The setting is on by default.
The device holds only an encrypted cache of recently used data for working without a connection.
Changes made offline are marked as "pending" and transmitted later with version checks. An action counts as done only after the server confirms it.
Credentials for mail, Nextcloud and Exchange accounts are stored in the iOS keychain or the Android Keystore.
They are not passed to the model or to assistant services. If you wish, the app locks itself with Face ID, Touch ID or fingerprint.
The app, not the model, performs data access and actions. The model receives only the excerpts approved for the request.
Areas determine which calendars, address books, mail folders and lists the assistant may read or change. Your own use of the app is not affected.
CollabNowPro speaks the open standard protocols IMAP, SMTP, POP3, CalDAV, CardDAV and WebDAV. Your data stays in formats and on servers you can change at any time.
One shared application core in the memory-safe language Rust serves all platforms. No telemetry, advertising or analytics components are built in.
ASSISTANT
The model runs on the device or on hardware owned by the organization. An external model service is used only if you explicitly choose one; there is no automatic fallback to a cloud.
In the chat, with an attached email or appointment if needed. The attached objects are the only screen content the assistant sees.
The app reads within the areas you have approved and gives the model only the necessary excerpts – never your credentials.
Every change appears as a card with target and content. The assistant sends email only to addresses you have approved.
The app executes. A request counts as done only once the server has confirmed it.
SEALED EMAIL In development
An option to send email sealed. You see only the choice "send securely" and the check mark once the message has arrived.
Sealed messages are encrypted on the basis of the open standard OpenPGP. Keys are generated and managed automatically in the background and exchanged only between correspondents, without publication in any directory.
Sealed messages travel exclusively over the secured network and through nodes of an existing fleet. The nodes hold each message for a random time and change its apparent size, so that incoming and outgoing messages are hard to match even under large-scale observation.
A message marked as sealed is never sent unencrypted without your explicit decision.