Invitation only / AR access with identity sealed
Walk in verified. Leave your name out of it.
Always Encrypted works through AR glasses: a plugin for the pair you already own, or our own NINE40 security glasses. You verify your identity with us once. After that, participating buildings check a sealed credential instead of your ID, and the doors on your route open as you reach them. The building knows you're cleared. It never learns who you are.
Glasses plugin: public deployment date pending.
Digital Access Panel and Physical Access Terminals: available now.
How it works
Verify once. After that, buildings check proof, not paperwork.
Most buildings learn who you are by collecting it: a name at the desk, an ID scan, a badge photo, a visitor log that outlives the visit. We split those jobs apart. Your identity is verified one time, by us. Every building after that only gets the answer it needs.
01
Verify once
You complete identity verification with Always Encrypted a single time. Your record is encrypted and stays with us.
Leaves your hands: ID check, to us only
02
Carry a credential
Your glasses hold a signed credential that says you passed verification and which clearances you hold. No name, no photo, no ID number.
On your glasses: proof, not profile
03
The building asks one question
An encrypted access point asks your glasses: is this person cleared for this door, right now? The credential proves the answer without handing over the facts behind it.
Building receives: yes or no
04
Doors open on your route
Doors, elevators and turnstiles release as you reach them. Your glasses show the route and the next directive, so there's no desk to stop at.
You see: the next directive
At every access point
The building trusts the proof. It doesn't need your file.
Verification still happens. It just happens once, with us, instead of at every front desk you walk past.
The building receives
- Identity verified yes
- Cleared for this zone yes / no
- Clearance window now
The building never receives
- Your name
- Your face or photo
- Date of birth
- ID or passport number
- Home address, phone, email
Inside a participating building
The route comes to you.
Your glasses draw the path to where you're going and show one directive at a time: the next door, the lift, the floor. Each access point along the way checks your credential as you approach and releases before you reach for the handle.
- Works in residential and commercial buildings that run Always Encrypted access points.
- The building decides which zones and hours each clearance covers.
- Nothing to carry beyond the glasses you already wear.
The Onion Protocol
Five layers. Each one harder to reach.
A credential opens only the layers it's cleared for. The building enforces every boundary without needing a name to do it.
01 / Civil
Public areas
Plaza, lobby and reception. Open to anyone, with the route starting here.
02 / Defense
Restricted zones
Private floors and residences, opened only for credentials cleared for them.
03 / Services
Emergency access
Stairwells, service routes and responder paths, kept separate from guest routes.
04 / Aerial
Air networks
The roof, the mast and the building's private network that the access points run on.
05 / Core
Maximum security
The innermost rooms, behind every other layer.
Private meetings
A meeting with no visitor log.
Book a room in a participating building and your guests arrive the way you do. Each one is checked for clearance to that floor and that room, and for nothing else. The building gets confirmation that everyone in the room was cleared. It doesn't get a list of who they were.
For the conversation before and after the meeting, our encrypted business communications run on Nextcloud-based infrastructure with AES-256 encryption at rest, perfect forward secrecy and multi-jurisdiction hosting. No third-party platform sits in the middle.
Where things stand
Available now, and what's next.
- Digital Access PanelOnline and offline interface for buildings and operatorsAvailable now
- Physical Access TerminalsThe readers at doors, gates and elevatorsAvailable now
- Zeus AR glasses pluginSoftware for the AR glasses you already ownDate pending
Technology demonstration, 54 seconds.
Two ways to wear it
Your own glasses, or ours.
01 / Plugin
The AR glasses you already own
Install the Always Encrypted plugin and use the eyewear you have today. Public deployment date pending.
02 / Our glasses
Purpose-built security glasses
Made by NINE40, they look like ordinary eyewear, with no visible cameras or displays. $225 a pair, or 12 pairs for $1,995 for security teams, government offices and enterprise staff.
Watches and rings
Your watch is the key.
The same sealed credential can live on your wrist. Wear the smartwatch you already own with our plugin for Apple Watch, Wear OS or Garmin, or choose one of three dress watches that look like any fine analog watch, with the credential concealed inside the case. Prefer something smaller? A ring does the same job.
- Watch plugins: in development. None is in an app store yet.
- Our watches: Envoy, Chancellor and Nocturne. Rings: two men's styles, two women's.
- Programmed from the Always Encrypted app on your phone.
Glasses, watch, ring
Use one, or use them together.
Each piece carries the same sealed credential, so any one of them gets you through the access points you're cleared for. Wear two or three and they share the work: the ring steers the glasses, the watch confirms on your wrist.
Glasses
Show you the route
Carry the credential and show one directive at a time. Works on its own.
Watch
A key on your wrist
Carries the credential on its own, or confirms a directive the glasses show you.
Ring
The quietest key
Carries the credential on its own, or controls the glasses with a tap of your thumb.
Packages
Choose a clearance level.
Pay in full or in four payments. Every package includes a 90-day implementation and 24/7 support.
Confidential clearance
Covert Operations
$2,484
or 4 payments of $621
- End-to-end encrypted communications
- AI-powered OSINT collection
- Automated lead qualification
- Single-jurisdiction deployment
- Basic threat intelligence feeds
- Standard compliance reporting
Secret clearance
Shadow Network
$7,436
or 4 payments of $1,859
- Multi-jurisdiction encrypted infrastructure
- Advanced AI agent deployment
- Automated outreach campaigns
- Real-time threat intelligence
- Behavioral analysis
- Advanced compliance automation
- 24/7 SOC monitoring
Top secret clearance
Black Operations
$12,612
or 4 payments of $3,153
- Global multi-location encrypted network
- Quantum-safe encryption protocols
- Advanced persistent threat (APT) defense
- Custom AI model training
- Dedicated intelligence analysts
- Hardware security module integration
- Executive threat assessment
- Priority incident response
Larger organization or several buildings? Ask about a custom enterprise deployment.
Request clearance
Start with a briefing.
Access is limited to qualified individuals and organizations. Tell us who you are and what you need. Requests are reviewed within 48 to 72 hours.
- You send this request. It travels encrypted.
- We review it and, if approved, schedule a private briefing.
- You complete the one-time identity verification.