Hardware-Rooted · Fully Self-Hosted · No Cloud Dependency

Sovereign communications.
Beyond the OS.
Under your control.

ConCom delivers cryptographic security entirely in hardware, beyond the reach of compromised operating systems, third-party jurisdictions, and cloud providers. Compatible with existing iPhones, iPads, and Windows systems.

Request a Demo See How It Works
ConCom Key – USB crypto module

ConCom Key

USB crypto module for Windows workstations. Plug-and-play. Full key management in hardware. No installation required.

Windows · USB-A
ConCom Case – iPhone crypto case

ConCom Case

Secure case with integrated crypto chip for iPhone (iOS 14+). USB-C pass-through. The iOS interface remains fully intact.

iPhone · iOS 14+
ConCom Case – iPad crypto case

ConCom Case

Secure case with integrated crypto chip for iPad (iPadOS 14+). USB-C pass-through. The iPadOS interface remains fully intact.

iPad · iPadOS 14+
Hardware
Encryption outside the OS
< 30 min
Server setup time
On-Premise
Runs entirely on your own infrastructure
Zero
Third-party cloud dependency

Where would you like to go?

The Security Problem

Why software encryption alone is not enough for sensitive communications.

Learn more →
Our Products

ConCom Key for Windows and ConCom Case for iPhone and iPad, plug-and-play hardware security.

See products →
How It Works

End-to-end encrypted communication, keys never leave the hardware device.

See animation →
Request a Demo

Ready to evaluate ConCom for your organisation? Get in touch directly.

Contact us →

The Problem

Structural dependency on
third-party platforms

WhatsApp and Signal encrypt within iOS or Windows. That means your security is only as strong as your operating system, and the vendor behind it.

The OS is the weakest link

WhatsApp and Signal encrypt within iOS or Windows. A compromised OS gives an attacker direct access to keys and plaintext, regardless of encryption strength.

Third-party jurisdiction & data control

Cloud-based platforms are subject to their host provider's legal jurisdiction. Access to communication data can be compelled by external authorities, potentially without notification to end users or their organisations.

Metadata exposure

Platforms log who communicates with whom, when, and how frequently. For defence and intelligence operations, this pattern data has direct operational value to adversaries.

The Solution

Three form factors. One platform.

ConCom moves cryptographic control out of the operating system and into dedicated hardware, while keeping the familiar devices your staff already use.

ConCom Key For Windows

ConCom Key

Physical crypto module for Windows workstations. Plug-and-play, no installation required.

  • Full key management in hardware
  • Compatible with all Windows systems
  • No new device or retraining required
  • Keys never leave the hardware module
  • OS acts only as a transport layer
ConCom Case For iPhone

ConCom Case

Secure case with integrated crypto chip for iPhone (iOS 14+). No OS modifications required.

  • Crypto chip via secure Bluetooth connection
  • Familiar iOS interface remains fully intact
  • No new device ecosystem required
  • No migration, no adoption barrier
  • Supports iOS 14 and later
ConCom Case for iPad For iPad

ConCom Case

Secure case with integrated crypto chip for iPad (iPadOS 14+). No OS modifications required.

  • Crypto chip via secure Bluetooth connection
  • Familiar iPadOS interface remains fully intact
  • No new device ecosystem required
  • No migration, no adoption barrier
  • Supports iPadOS 14 and later
iPhone and iPad

NATO approval, February 2026: Apple's iPhone and iPad were approved for handling NATO classified information — a relevant milestone for anyone evaluating ConCom Case. Read the announcement →

Comparison

ConCom vs. software-based solutions

Most secure messaging tools still rely on the operating system. ConCom does not.

Feature WhatsApp / Signal ConCom
Encryption location Within the OS, vulnerable if OS is compromised Dedicated hardware, fully outside the OS
Key management By app vendor or operating system Fully under organisational control
Legal jurisdiction Subject to platform provider's jurisdiction Under full organisational control
Metadata Accessible to platform provider Minimised, no external exposure
Server infrastructure Cloud-hosted by vendor, no control Self-hosted on your own hardware
Existing devices Yes Yes, no device migration required
Adoption barrier Low Low, unchanged iOS/Windows experience

How It Works

Your message. Encrypted in hardware.
Unreadable to everyone else.

ConCom performs all encryption inside a dedicated hardware module, never touching the operating system. See it happen in real time.

ConCom Server
encrypted only, never sees plaintext
 
 
ConCom Key
ConCom Key
Sender
Confidential briefing
Receiver
 
1

Plain text

Message starts as readable text on the sender's device.

2

Hardware encryption

Sender's ConCom Key encrypts entirely in hardware, the OS never sees the content.

3

Encrypted server

The self-hosted ConCom Server routes the message, only ever handles ciphertext.

4

Hardware decryption

Only the receiver's ConCom Key can decrypt. Decryption happens in hardware, not the OS.

5

Delivered securely

The original message arrives readable, only to the intended recipient.

Architecture Principles

Built on three uncompromising principles

Every design decision in ConCom flows from the same goal: keep cryptographic control inside your perimeter.

Hardware isolation

Key management and encryption occur exclusively within the ConCom module. The OS acts only as a transport layer with no access to plaintext or keys.

End-to-end in hardware

Servers process only encrypted data. There is no point in the infrastructure where a third party can intercept readable messages.

Metadata minimisation

Communication flows through the physical crypto module. No usable metadata is available to external platforms or infrastructure operators.

Self-Hosted Deployment

On-premise. Any scale.

ConCom's server component runs entirely within your own perimeter — no external server, no third-party cloud, no data leaving your infrastructure.

Minimal footprint

The ConCom server runs on any ARM or x86 hardware. A Raspberry Pi 4 (4 GB) is sufficient for up to 50 concurrent users. A standard NUC or rack unit scales to enterprise deployments.

No cloud dependency

Runs entirely on infrastructure you control. No external server, no third-party cloud, no data leaving your perimeter.

Simple administration

Docker-based deployment with a single configuration file. No specialised IT infrastructure required. Setup time under 30 minutes on supported hardware.

Minimum hardwareRaspberry Pi 4 · 4 GB RAM · 32 GB storage
RecommendedIntel NUC / any x86-64 server · 8 GB RAM · SSD
Operating systemLinux (Debian / Ubuntu), ARM64 or x86-64
DeploymentDocker Compose, single command install
NetworkLAN / VLAN, on-premise
Concurrent usersUp to 50 on Raspberry Pi 4 · 500+ on NUC-class hardware

No Disruption

The iPhone stays the iPhone.
The security becomes sovereign.

A common barrier to secure communication adoption is resistance to change. Staff who switch to unfamiliar systems reduce operational effectiveness in practice, and bypass secure tools when ease of use is lacking.

ConCom is designed to remove this barrier entirely. Staff retain the familiar iOS interface and Windows environment they already use.

"Digital sovereignty is not optional. It is an operational requirement."

No new device ecosystem

Staff continue using their existing iPhones and Windows workstations. No migration. No unfamiliar hardware to learn.

No retraining required

The iOS and Windows interfaces are completely unchanged. Security is added invisibly at the hardware level.

No third-party dependency

Fully self-hosted. No cloud vendor. No external back-end. No jurisdiction risk. Fully yours.

Contact

Ready to take control of your communications?

Request a demo or reach out to discuss your organisation's requirements. We work with government bodies, defence organisations, and critical infrastructure operators.

info@concom.eu
concom.eu

🔒
Privacy by default This site uses no tracking or analytics cookies. A few functional third-party scripts — Web3Forms (secure contact form), hCaptcha (spam protection) and Google Fonts — load only to make the site work, never to track you. Learn more