VILKO · SECURE TEAM COMMUNICATION

No one readsyour messages.Not even us.

Vilko is encrypted team messaging built on DIDComm v2. Every identity is cryptographically verified. Custody keys live on your device. Sovereign deployment is a checkbox, not a sales cycle.

v1.0 · released Apr 2026Scroll
EncryptionX25519 + XC20P
Server accessZero. Relay is a dumb queue.
IdentityDIDComm v2 · W3C standard
DeploymentCloud · Self-host · Sovereign
Product surface

Everything a team needs.
Nothing a server can read.

Messaging, calls, calendar, tasks, and files — built on a single encrypted protocol. One app for regulated teams that can't risk a breach.

01 / 06

Messaging

1:1, channels, threads, reactions. Encrypted in transit and at rest. Post-quantum upgrade path ready.

DIDComm v2
02 / 06

Calls

Voice and video up to 50 participants. Media streams are peer-to-peer — they do not pass through our servers.

WebRTC · P2P
03 / 06

Calendar

Invites delivered over DIDComm, not email. Time polls, signed RSVPs, cryptographic delegation.

Signed invites
04 / 06

Tasks

Kanban board linked to messages and calendar. Create a task from any message with one click.

Workspace-wide
05 / 06

Files

100 MB free, 1 GB paid, encrypted at rest in your vault. Preview PDFs, images, code, and video inline.

Vault-encrypted
06 / 06

Admin

Audit logs, eDiscovery, data retention, SSO. Self-hosted or sovereign deployment available.

Compliance
Architecture

Three parts.
Your keys unlock your data.

Client-held keys protect your locked tenant data. The relay forwards ciphertext it cannot decrypt, and the directory only knows which email maps to which public DID. Our current cloud service can access decrypted data while your tenant is open.

01 / CLIENT

Your custody keys live on your device.

Your passkey derives the keys that unlock your account, and those never leave your device — we cannot unlock your data without you. Messages encrypt before they hit the wire with X25519 + XC20P.

02 / MEDIATOR

The relay is blind.

Our relay stores encrypted blobs and forwards them. It cannot read content, resolve senders, or reconstruct history. It is protocol_coordinate_mediation, nothing more.

03 / DIRECTORY

Identity you can verify.

Email maps to did:peer. Verifiable credentials back the “Verified” badge. Federate it, self-host it, or run it inside your own sovereign cloud.

Comparison

Vilko, honestly.

We show our work. Where Slack, Teams, and Signal differ from us — and why a regulated team can't just “use Signal for work.”

SlackMS TeamsSignalVilko
Stored data unreadable without your keysNoNoYesYes
Server cannot read while your tenant is openNoNoYesNot yet
Identity verificationEmailAD / SSOSafety #VC-backed
CalendarExternalYesNoBuilt-in
Self-hostableNoPartialPartialYes
Compliance toolingBasicYesNoFull
Open protocolNoNoPartialDIDComm
Built for

Regulated teams.
Real consequences.

Healthcare, legal, finance, and government teams can't ship sensitive work through vendors that read their messages. Vilko is compliant by construction — not by configuration.

Government

Sovereign deployment inside a regulated cloud. Data never leaves jurisdiction.

Banking

Audit every message without the vendor reading any of them. eDiscovery built-in.

Legal

Privileged communication, cryptographically proven. Signed RSVPs and message proofs.

Healthcare

Patient data never touches a server that can decrypt. DPDP and HIPAA posture out of the box.

Pricing

Fair at every scale.

Free for individuals. Predictable per-seat pricing for teams. Sovereign deployment for organizations that answer to regulators.

Individuals

Free

$0/forever

For individuals and teams of up to 10. Everything encrypted, no credit card.

  • 1:1 messaging
  • Groups up to 10
  • 1 GB storage
  • 1:1 calls
Small teams

Pro

$5/user/mo

Full feature set for growing teams. Channels, calendar, tasks, group calls.

  • Unlimited channels
  • Calendar + tasks
  • 50 GB per user
  • Group calls to 25
Regulated

Business

$18/user/mo

Compliance, audit, SSO, retention. For companies that answer to regulators.

  • SAML/OIDC SSO
  • Audit + eDiscovery
  • 500 GB per user
  • Retention policies
Sovereign

Enterprise

Custom

Self-hosted or sovereign cloud. Dedicated support, custom SLA, unlimited storage.

  • Self-hosted
  • Sovereign deployment
  • Dedicated support
  • Custom SLA

Start with silence.
Scale with trust.

Create a workspace in under a minute. No credit card. No phone number. Just an email.