Metadata & Privacy

This page explains exactly what is visible and what stays invisible when using INVIZD.

​

Updated May 1, 2026

Presented by INVIZD

INVIZD.com

 

Our Core Design Principles

 

•  Each INVIZD Box is a sovereign, tamper-resistant hardware enclave that you fully control.

•  Communication is invitation-only and requires approval from Box owners. There is no open federation or public discovery.

•  All user-to-user messages, files, and media use strong end-to-end encryption.

•  The system uses hardware-level SSD/eMMC encryption with keys generated uniquely per device.

•  There is no console port or direct login access to the Box.
 

What a Box Owner (Master) Can See

 

Inside Their Own Box (up to 10 trusted users):
•  List of user accounts and their usernames

•  Number of active guest accounts

•  Basic room membership lists (who is in which rooms)

For Approved Cross-Box Federation (after mutual vetting):
•  That a trusted connection exists with another specific Box
•  Which of their own users are participating in shared rooms

​

Important: The Box owner has no OS-level access, sniffer tools, or direct server access. They can only interact with the system through the official chat client app. The master user cannot see any other user’s email content.
 

What the Box Owner Cannot See

•  The actual content of messages (text, files, photos, videos, etc.) in encrypted rooms
•  Other users’ emails

•  Encrypted data from other Boxes

•  Detailed traffic analysis or deep metadata beyond the limited items listed above

How INVIZD Protects Privacy

•  Hardware-level isolation and tamper resistance keep your data physically protected.
•  No third-party servers or cloud providers ever have access.
•  Invitation-only federation means external parties see nothing unless you explicitly approve them.
•  All logs and system data are protected with the same strong encryption as user content.

 

This design intentionally balances necessary administrative oversight for Box owners with strong privacy protections for all users.

Independent Security Review

We have commissioned a full third-party security review of the INVIZD hardware and software stack, including encryption, metadata handling, and isolation mechanisms. Results will be published here in full within 4–6 weeks (expected May/June 2026).

Common Questions
1) Can I limit what even I (the Box owner) can see?
Currently the owner has basic administrative visibility (account list and room memberships). We are exploring options for stricter controls for users who want even less internal visibility.

2) Does INVIZD expose metadata to the internet or third parties?
No. All communication happens directly between INVIZD Boxes after proper vetting. There are no public servers involved.

3) Can INVIZD or anyone else read our messages?
No. We have no backdoors, no master keys, and no ability to access your encrypted data.

———

Privacy 
is non-negotiable.