Skip to content

One capability

A message can be the document itself.

Not a photograph of a paper form, and not a link to a portal you have to log into. The real thing arrives inside the conversation, laid out properly on whatever you are reading it on, and it is unreadable to everything it passed through on the way.

Three things are true of every one

Typed
It arrives as something your device understands. Fields with names, values with units, an amount that is a number rather than a picture of one.
Opaque
The server carries it and cannot see its type, its fields or its values. It validates nothing, because there is nothing it can read.
Signed
Every payload carries its author. An approval is attributable to the person who gave it, and the signature travels with the message.
Two hands at an approval card showing an amount and a tick, drawn as one continuous line

What a type looks like

A message type is a set of named fields and a way of drawing them on a screen. The range below is here to show the shape of the idea rather than to serve as a price list.

Health

Prescription
Medicine · dose · schedule · dispensing pharmacy
Referral
Specialty · urgency · notes · patient reference
Result
Test · value · reference range · reporting clinician
A pill bottle, a blister pack and a dosage table inside a speech bubble above a phone, drawn as one continuous line

Money

Transfer
Amount · account · reference · approver
Invoice
Line items · total · due date · terms
Mandate
Payer · limit · expiry
Two hands at an approval card showing an amount and a tick, drawn as one continuous line

Legal

Contract
Parties · terms · execution date
Signature
Signatory · method · timestamp
Disclosure
Matter · recipient · scope
People around a table with contracts, a signature in progress and an approval card, drawn as one continuous line

Operations

Handover
Shift · outstanding items · keys held
Inspection
Location · checks · defects · sign-off
Incident
Severity · systems affected · actions taken
A clipboard of tick boxes passing between two hands with a set of keys resting on the page, drawn as one continuous line

Logistics

Delivery
Consignment · quantity · receiver
Collection
Slot · address · contact
Damage report
Item · condition · claim reference
A wooden crate with a paper docket clipped to it and a hand tearing off the lower half, drawn as one continuous line

Scheduling

Appointment
Time · place · attendees
Booking
Resource · duration · cost
Cancellation
Reference · reason · notice given
An open desk diary with one time slot ringed, a folding travel clock and a hand resting a card against the page, drawn as one continuous line

The same message, twice

One payload, one journey, two views of it. On your device it is a payment request with an amount on it and a button that says approve. On the wire it is a run of bytes with a length and a delivery token. There is no third version, held somewhere in the middle, that we can read.

On your device

Transfer

€240,000.00

Completion · 14 Rue des Écoles

Approvesigned

On the wire

ciphertext · no type · no fields · no amount

Define your own

A type is a schema and a renderer. Your organisation can add types of its own without anything changing about the transport, because the transport was never looking at the contents in the first place.

Schema plus renderer. The relay is unchanged.

A wooden crate with a paper docket clipped to it and a hand tearing off the lower half, drawn as one continuous line
A clipboard of tick boxes passing between two hands with a set of keys resting on the page, drawn as one continuous line

To us it is all just ciphertext.

Whatever shape you give a message, the part we handle is the part we cannot read. That is the same for a sentence, a prescription and a payment.

How the encryption worksWhere these live