Metadata & Privacy

This page explains exactly what is visible and what stays invisible when using INVIZD.

​

Updated August 20, 2026

Presented by INVIZD

INVIZD.com

 

Our Core Design Principles

 

•  Each INVIZD Box is a sovereign, tamper-resistant hardware enclave that you fully control.

•  Communication is invitation-only and requires approval from Box owners. There is no open federation or public discovery.

•  All user-to-user messages, files, and media use strong end-to-end encryption, and remain totally anonymous.

•  The system uses hardware-level SSD/eMMC encryption with keys generated uniquely per device.

•  There is no console port or direct login access to the Box.
 

What a Box Owner (Master) Can See

 

Inside Their Own Box (up to 10 trusted users):
•  List of anonymous user accounts and their anonymous usernames (Anonymous information created by the user)

•  Number of active guest accounts

•  Basic room membership lists (which anonymous user and account is in each room)

For Approved Cross-Box Federation (after mutual vetting):
•  That a trusted connection exists with another specific Box
•  Which of their own anonymous users are participating in shared rooms

​

Important: The Box owner has no OS-level access, sniffer tools, or direct server access. They can only interact with the system through the official chat client app. The master user cannot see any other user’s email, text or attachment content.
 

What the Box Owner Cannot See

•  The actual content or title of messages (email,text, files, photos, videos, etc.) in encrypted rooms
•  Other users’ PII or any other data

•  Encrypted data from other users or other Boxes

•  Detailed traffic analysis or deep metadata beyond the limited items listed above

How INVIZD Protects Privacy

•  Hardware-level isolation and tamper resistance keep your data physically protected.
•  No third-party servers or cloud providers ever have access.
•  Invitation-only federation means external parties see nothing unless you explicitly approve them.
•  All logs and system data are protected with the same strong encryption as user content.

 

This design intentionally balances necessary administrative oversight for Box owners with the best privacy protections for all users.

Independent Security Review

We have commissioned a full third-party security review of the INVIZD hardware and software stack, including encryption, metadata handling, and isolation mechanisms. Results will be published here in full within 4–6 weeks (expected in the last quarter 2026).

Common Questions
1) Can I limit what even I (the Box owner) can see?
Currently the owner has basic administrative visibility (anonymous account list and room memberships). We are exploring options for stricter controls for users who want even less internal visibility.

2) Does INVIZD expose metadata to the cloud or third parties?
No. All communication happens directly between INVIZD Boxes after proper vetting. There is no cloud involved.

3) Can INVIZD or anyone else read our messages?
No. We have no backdoors, no master keys, and no ability to access your encrypted data.

———

Privacy 
is non-negotiable.