          
          End-to-end encrypted · server-blind by design
        

End-to-end encrypted
calls & deal rooms for business

Ollasync is private video, screen sharing, recording, and confidential document rooms — encrypted in the browser so the server, the SFU, and we ourselves only ever see ciphertext. Hosted in the EU, or self-host your own.

Open the app → How the crypto works

No plaintext on our servers EU data residency (Frankfurt) Self-host option

encrypted call · 4 here live

Jane D.

Bob S.

Aïsha K.

You

Share Leave

              
              key: generated in your browser, never on our servers
            

          AES-256-GCM·X25519 key agreement·HKDF·WebRTC Insertable Streams·SFrame·EU · Frankfurt·zero plaintext·
          AES-256-GCM·X25519 key agreement·HKDF·WebRTC Insertable Streams·SFrame·EU · Frankfurt·zero plaintext·
        

Proof, not promises

plaintext bytes the server can read

AES-GCM

authenticated encryption on every frame & message

E2EE

on chat, audio, video and screen share

100%

self-hostable, no vendor lock-in

Everything you need

One product for confidential collaboration

Calls, rooms and chat that assume the network is hostile — because for the conversations that matter, it is.

Encrypted video & screen share

HD calls, multi-party, screen sharing and recording — every track sealed with a key the SFU never sees.

Confidential deal rooms

Spin up an ephemeral room with documents, NDAs, parties and an audit trail. Built for M&A, diligence and legal.

Server-blind chat

In-call and async messaging encrypted end to end. The relay stores ciphertext only — not metadata theatre, real blindness.

Client-side keys

Each room's key is generated in your browser and shared only through the invite link — never sent to our servers. Chat, audio, video and screen share are all sealed with it.

SSO, passkeys & teams

EU data residency

Our shared cloud runs in the EU (Frankfurt, Germany). Need Switzerland or another jurisdiction? Single-tenant and self-hosted deployments put the SFU where you choose.

Self-host option

Run the whole stack on your own infrastructure — one app server, one database, your SFU. No phone-home.

Built for

Teams who can't afford to trust the server

If a leak is an existential event — a deal, a case, a patient, a board — Ollasync is built for you.

M&A & deal rooms

Diligence data rooms with NDAs, watermarks and a tamper-evident activity log.

Learn more →

Legal & advisory

Privileged client conversations that stay privileged — even from us.

Learn more →

Finance & OTC

Trade and treasury comms that never touch the server in the clear — with EU residency.

Learn more →

Healthcare

Clinician–patient calls with a server-blind design that supports your DPA.

Learn more →

How it works

The server holds ciphertext. Only the room holds keys.

Identity and media keys are generated and kept in your browser — each room's key is shared only through the invite link, never with our servers. Message, call and screen-share frames are all sealed with it. The delivery service and the SFU relay encrypted bytes they cannot read — verified end-to-end, not asserted in a policy doc.

Read the security model →

Your browser

generates keys · encrypts frames

plaintext

Delivery service & SFU

relays bytes it cannot read

ciphertext

Other room members

decrypt with the shared room key

plaintext

Try it now

Start a private room in seconds

No credit card to try it. Your conversations stay yours — encrypted end to end, the server never holds a key.

Open the app → How the crypto works

Features

Everything you need — sealed end to end

Calls, rooms and chat that assume the network is hostile. Every capability is built so the server only ever relays ciphertext.

Encrypted video & screen share

HD multi-party calls, screen sharing and recording. Each media frame is encrypted with WebRTC Insertable Streams before it leaves your device — the SFU forwards packets it cannot decode.

SFrame recording up to 50 tiles

gallery-view screenshot

deal-room screenshot

Confidential deal rooms

Ephemeral rooms with documents, NDAs, invited parties and a tamper-evident activity log. Purpose-built for M&A, diligence and legal workflows.

watermarks NDAs audit trail

Server-blind chat

In-call and async messaging encrypted end to end. The relay stores ciphertext only — real blindness, not metadata theatre.

threads files reactions

chat-panel screenshot

Client-side keys

Room keys generated in your browser, shared only through the invite link.

SSO & passkeys

OIDC & SAML, passkeys, 2FA and magic-link for your whole org.

EU data residency

Shared cloud in Frankfurt; single-tenant elsewhere on request.

Self-host

One app server, one database, your SFU. No phone-home.

Security

The server holds ciphertext. Only the room holds keys.

Verified end-to-end encryption, not asserted in a policy doc. Here is exactly what we can and cannot see.

What the server never sees

✓ Audio, video and screen-share content
✓ Chat messages and shared files
✓ Room encryption keys
✓ Deal-room documents

What the server does handle

• Encrypted byte relay between peers
• Auth & session tokens (SSO / passkeys)
• Room membership & routing
• Tamper-evident audit metadata

How a frame travels

Your browser

generates keys · encrypts frames

plaintext

Delivery service & SFU

relays bytes it cannot read

ciphertext

Other room members

decrypt with the shared room key

plaintext

AES-256-GCM

Authenticated encryption on every frame and message.

X25519

Elliptic-curve key agreement for room membership.

HKDF

Per-track key derivation from the shared room secret.

SFrame

End-to-end media framing the SFU forwards untouched.

Use cases

Teams who can't afford to trust the server

If a leak is an existential event — a deal, a case, a patient, a board — Ollasync is built for you.

M&A & deal rooms

Diligence data rooms with NDAs, watermarks and a tamper-evident activity log.

› Per-party document permissions
› Dynamic watermarking
› Signed, immutable audit log
› Auto-expiring room access

Legal & advisory

Privileged client conversations that stay privileged — even from us.

› Privilege-preserving by design
› Client-matter workspaces
› Retention & legal hold
› Recorded consultations, sealed

Finance & OTC

Trade and treasury comms that never touch the server in the clear — with EU residency.

› EU data residency (Frankfurt)
› Exportable compliance records
› SSO & SCIM provisioning
› Single-tenant deployment

Healthcare

Clinician–patient calls with a server-blind design that supports your DPA.

› Server-blind consultations
› DPA & BAA support
› No content stored in the clear
› Waiting-room & identity checks

Pricing

Priced for teams that keep secrets

EU-hosted by default. Move to single-tenant or self-host at any tier. No credit card to try it.

Team

€12/user · mo

For small teams that need private calls today.

Start free

✓ Up to 25 members
✓ E2EE calls up to 20 participants
✓ Server-blind chat
✓ 1 active deal room
✓ Passkeys & 2FA
✓ EU hosting (Frankfurt)

Notes on building server-blind

Engineering, cryptography and product from the Ollasync team.

Ollasync server-blind architecture — a server structurally unable to read your end-to-end encrypted data

Engineering

Why we built Ollasync server-blind from day one

Most "encrypted" tools still trust the server. We decided the server should be structurally incapable of reading your data — here's the architecture that makes it true.

Jul 14, 2026 · 8 min read

Encrypted media frames passing through an SFU relay that cannot decrypt them

Cryptography

How SFrame keeps the SFU in the dark

Jul 2 · 6 min

EU data residency — encrypted video hosted in the EU with a map of Europe and a secure data center

Compliance

EU data residency, actually explained

Jun 21 · 5 min

Self-host the Ollasync SFU — a glowing server rack you run on your own infrastructure

Guide

Run a self-hosted SFU in 20 minutes

Jun 9 · 10 min

Docs

Build on an encrypted core

Guides, concepts and API references for shipping with Ollasync — hosted or self-hosted.

Quickstart

Create an encrypted room and invite a peer. The room key is generated in the browser and shared only through the invite link — it never reaches our servers.

room.ts

// keys are generated client-side, never sent to the server
import { createRoom } from "@ollasync/sdk";

const room = await createRoom({ e2ee: true });
console.log(room.inviteLink); // share this out-of-band

await room.join({ camera: true, mic: true });

Security model →

Exactly what the server can and cannot see.

Self-hosting →

One app server, one database, your SFU.

End-to-end encryptedcalls & deal rooms for business

One product for confidential collaboration

Encrypted video & screen share

Confidential deal rooms

Server-blind chat

Client-side keys

SSO, passkeys & teams

EU data residency

Self-host option

Teams who can't afford to trust the server

M&A & deal rooms

Legal & advisory

Finance & OTC

Healthcare

The server holds ciphertext. Only the room holds keys.

Start a private room in seconds

Everything you need — sealed end to end

Encrypted video & screen share

Confidential deal rooms

Server-blind chat

Client-side keys

SSO & passkeys

EU data residency

Self-host

The server holds ciphertext. Only the room holds keys.

What the server never sees

What the server does handle

How a frame travels

Teams who can't afford to trust the server

M&A & deal rooms

Legal & advisory

Finance & OTC

Healthcare

Priced for teams that keep secrets

Notes on building server-blind

Why we built Ollasync server-blind from day one

How SFrame keeps the SFU in the dark

EU data residency, actually explained

Run a self-hosted SFU in 20 minutes

Build on an encrypted core

Quickstart

Security model →

Self-hosting →

End-to-end encrypted
calls & deal rooms for business