# Always Encrypted: full text > Plain-text content of the key pages and written guides at https://alwaysencrypted.com. Summary and policies: https://alwaysencrypted.com/llms.txt. Generated by tools/seo/build_llms.py. ======================================================================== # Always Encrypted home URL: https://alwaysencrypted.com/ Credential verified Personal data shared: none Next: elevator B / floor 31 Route 40 m / 3 access points Invitation only / AR access with identity sealed ## Walk in verified. Leave your name out of it. Explainer 01 · Exposed · 61 s · all six → Always Encrypted lets you verify your identity once and then open doors on a sealed credential. Participating buildings learn that you are cleared for a zone and nothing else: no name, face or ID number. It works through AR glasses, a watch or a ring, and it adds encrypted navigation and private meetings. Request clearance See how it works View network Glasses plugin: public deployment date pending. Digital Access Panel and Physical Access Terminals: available now. Explainer 02 · 61 seconds · captions on Walk in verified. Verify once with one human auditor, then carry a sealed credential. Every door checks proof, never your name. All six explainers → Start here ## Sixty seconds on how verified access replaces your ID. Six short films: your exposure today, how verified access replaces your ID, how a location or a vehicle earns on the network, what to do between the car and the door, the live theater map, and meetings that leave no visitor log. Watch all sixOpen the live network How it works ## Verify once. After that, buildings check proof, not paperwork. Most buildings learn who you are by collecting it: a name at the desk, an ID scan, a badge photo, a visitor log that outlives the visit. We split those jobs apart. Your identity is verified one time, by us - one human auditor, zero artificial intelligence, with a single encrypted off-site backup every 24 hours as the total exposure. Every building after that only gets the answer it needs. See how verification works, or list your own location and get paid for access. 01 ## Verify once You complete identity verification with Always Encrypted a single time - knowledge-based questions answered by you, validated by one human auditor. Your record never touches AI, third-party APIs or LLMs, never leaves our servers, and you hold the private keys to it. Leaves your hands: ID check, to us only 02 ## Carry a credential Your glasses hold a signed credential that says you passed verification and which clearances you hold. No name, no photo, no ID number. On your glasses: proof, not profile 03 ## The building asks one question An encrypted access point asks your glasses: is this person cleared for this door, right now? The credential proves the answer without handing over the facts behind it. Building receives: yes or no 04 ## Doors open on your route Doors, elevators and turnstiles release as you reach them. Your glasses show the route and the next directive, so there's no desk to stop at. You see: the next directive At every access point ## The building trusts the proof. It doesn't need your file. Verification still happens. It just happens once, with us, instead of at every front desk you walk past. The building receives - Identity verified yes - Cleared for this zone yes / no - Clearance window now The building never receives - Your name - Your face or photo - Date of birth - ID or passport number - Home address, phone, email Explainer 01 · 61 seconds · captions on Exposed. Your exposure in the open world today: ID scans, visitor logs, facial recognition, phone location, the trail your car leaves. All six explainers → Residence 14B released Badge printed: none / Guest log: none Inside a participating building ## The route comes to you. Your glasses draw the path to where you're going and show one directive at a time: the next door, the lift, the floor. Each access point along the way checks your credential as you approach and releases before you reach for the handle. - Works in residential and commercial buildings that run Always Encrypted access points. - The building decides which zones and hours each clearance covers. - Nothing to carry beyond the glasses you already wear. Live isometric render · cab to door to floor 3 Move through the network. Every ring is an access point that answers your packet, never your name. Renders in your browser; nothing is sent anywhere. Lowest threat 15 min · exposure 7 AIR 52 · MIL 6 · LIVE In the car ## Four routes. You choose the exposure. Every trip comes back as four routes ranked by what can see you on the way: the lowest threat, a medium route that saves time, the high route through the city, and the highest, where we recommend an escort. Cameras, toll plazas, stations and live civilian and state aircraft show along each one before you leave. - Route provided by alwaysencrypted.com, on the screen you already have. - Flight patterns update live, so you can change the route while you drive. - A printable operating procedure for the route you choose. The Onion Protocol ## Five layers. Each one harder to reach. A credential opens only the layers it's cleared for. The building enforces every boundary without needing a name to do it. - 01 / Civil ## Public areas Plaza, lobby and reception. Open to anyone, with the route starting here. - 02 / Defense ## Restricted zones Private floors and residences, opened only for credentials cleared for them. - 03 / Services ## Emergency access Stairwells, service routes and responder paths, kept separate from guest routes. - 04 / Aerial ## Air networks The roof, the mast and the building's private network - plus drone access, private VTOL and quadcopter arrivals as they become available. The aerial layer extends beyond the roof: drone access, private VTOL aircraft and quadcopter deliveries connect participating buildings, added as they become available in each jurisdiction. Attendants clear your wearables on arrival - and nothing follows you home: no biometric scan, card number or photo is left at the location or with any third party. Your human, digital, physical and financial identity stays yours. - 05 / Core ## Maximum security The innermost rooms, behind every other layer. Private meetings ## A meeting with no visitor log. Book a room in a participating building and your guests arrive the way you do. Each one is checked for clearance to that floor and that room, and for nothing else. The building gets confirmation that everyone in the room was cleared. It doesn't get a list of who they were. Meet without meeting - on location or digitally, your privacy is guaranteed: our encrypted communications run on our own infrastructure with transport encryption always on, end-to-end encryption on by default in Chrome-family browsers, perfect forward secrecy and multi-jurisdiction hosting, and media that is never stored on our servers. Join anonymously from any device, keep your camera off, even change your voice. No third-party platform sits in the middle. Anonymous Video Chat → Free to join. No account, no download, no name. Room 31-C / 2 guests cleared Names on file: none Explainer 06 · 61 seconds · captions on Meet without meeting. Private rooms with no visitor log, and anonymous video chat with nothing to install. All six explainers → Where things stand ## Available now, and what's next. - Digital Access PanelOnline and offline interface for buildings and operators Available now - Physical Access TerminalsThe readers at doors, gates and elevators Available now - Zeus AR glasses pluginSoftware for the AR glasses you already own Date pending Technology demonstration, 44 seconds. Two ways to wear it ## Your own glasses, or ours. 01 / Plugin ## The AR glasses you already own Install the Always Encrypted plugin and use the eyewear you have today. Public deployment date pending. 02 / Our glasses ## Purpose-built security glasses Made by NINE40, they look like ordinary eyewear, with no visible cameras or displays. $225 a pair, or 12 pairs for $1,995 for security teams and enterprise staff. Glasses and pricingNINE40 site Lift lobby / floor 31 authorized Watches and rings ## Your watch is the key. The same sealed credential can live on your wrist. Wear the smartwatch you already own with our plugin for Apple Watch, Wear OS or Garmin, or choose one of three dress watches that look like any fine analog watch, with the credential concealed inside the case. Prefer something smaller? A ring does the same job. - Watch plugins: in development. None is in an app store yet. - Our watch: the Courier camera smartwatch. Rings: Cipher, Sentinel and Bastion. - Programmed from the Always Encrypted app on your phone. See the watchesSee the rings Glasses, watch, ring ## Use one, or use them together. Each piece carries the same sealed credential, so any one of them gets you through the access points you're cleared for. Wear two or three and they share the work: the ring steers the glasses, the watch confirms on your wrist. - Glasses ## Show you the route Carry the credential and show one directive at a time. Works on its own. - Watch ## A key on your wrist Carries the credential on its own, or confirms a directive the glasses show you. - Ring ## The quietest key Carries the credential on its own, or controls the glasses with a tap of your thumb. Explainer 04 · 69 seconds · captions on Entering and exiting. Countermeasures between the car and the door: NINE40 glasses, the hat, no verbal comms, watch and ring packets. All six explainers → Packages ## Choose a clearance level. Pay in full or in four payments. Every package includes a 90-day implementation and 24/7 support. The package price is the assessment. We evaluate your position, issue capabilities, and stand up your operator. Running costs are separate: encrypted infrastructure starts at $500 a month, billed monthly - servers, platforms and live monitoring your technical operator or executive assistant can access on the go, so the primary asset moves through the world with active intelligence at all times. What you are buying is personal protection through signal intelligence - on the ground, in the air, or moving through traffic. Local, national or international: 24/7 live monitoring over encrypted connections, with communications and visual intelligence displayed immediately on approach, ingress and egress. Deployment within the hour. Confidential clearance ## Covert Operations $2,484 or 4 payments of $621 Assessment & capability issue - running costs from $500/mo - End-to-end encrypted communications - AI-powered OSINT collection - Automated lead qualification - Single-jurisdiction deployment - Basic threat intelligence feeds - Standard compliance reporting - Live Intelligence console - basic version: global situation awareness with live air, satellite, seismic and natural-event signals. Includes a tight local SIGINT package - live local signals around your own sites to protect assets in theater, with geofence proximity alerts. Live Intelligence field kit - included - Field Radar (Android). Passive Wi-Fi and Bluetooth observation through a live tactical HUD. No root, no accounts, no cloud - full operation in airplane mode. The phone is the sensor. - Baseline mapping & anomaly tripwires. Learns what is normal around your position, then flags what changes: new transmitters, persistent followers, signal-density spikes, spoofed hotspots. - Watch & mute rules. Promote what matters, suppress the noise. Fleet and cellular-router hardware is classified automatically; your own rules stay local on the device. - Perimeter Node. A persistent sensor for your vehicle, property or trailhead. Survives reboots and power loss, reconnects itself, and keeps working with no internet at all. - Infrastructure recon. Passive profiling of any domain - DNS, certificates, headers, hosting lineage - consolidated into an operator-ready brief. Public metadata only. - Team deployment. Five synchronized devices for coordinated coverage of a site, a route or a movement. - Field doctrine. Signal-sweep manuals: hotel and rental privacy sweeps, tracker detection, threat signatures, escalation triggers. All collection is passive. Nothing is intercepted, decrypted or transmitted. Request Covert Operations Want a live demo? Create an anonymous account and request access through the additional communication options inside. Secret clearance ## Shadow Network $7,436 or 4 payments of $1,859 Assessment & capability issue - running costs from $500/mo - Multi-jurisdiction encrypted infrastructure - Advanced AI agent deployment - Automated outreach campaigns - Real-time threat intelligence - Behavioral analysis - Advanced compliance automation - 24/7 SOC monitoring - Agricultural drone management - fleet oversight from survey drones up to heavy-lift platforms - Aerial luggage logistics - drones carrying up to 100 lbs deliver baggage to hotels and buildings with aerial reception ports, where bellmen and flight attendants complete the transfer Operational capabilities - Movement overwatch. Encrypted eyes on your position while you move - ground vehicles, traffic corridors, arrival and departure windows. - Aerial logistics command. Agricultural drone management up to 100-lb transport platforms - baggage and materiel moved between buildings, hotels and aerial reception ports, with bellman and flight-attendant handoff on arrival. - Forward sensor placement. Signal-awareness nodes staged at your properties and routes report over encrypted channels to a single console. - 24/7 watch floor. SOC monitoring with real-time threat intelligence and behavioral analysis - anomalies routed to your operator, not a ticket queue. Request Shadow Network Top secret clearance ## Black Operations $12,612 or 4 payments of $3,153 Assessment & capability issue - running costs from $500/mo - Global multi-location encrypted network - Quantum-safe encryption protocols - Advanced persistent threat (APT) defense - Custom AI model training - Dedicated intelligence analysts - Hardware security module integration - Executive threat assessment - Priority incident response - Full aerial logistics command - agricultural drone management plus 100-lb-class transport drones moving luggage between your buildings, hotels and aerial ports, with staff handoff on arrival Operational capabilities - Every theater. Local, national, international - one encrypted network across all of it, with quantum-safe protocols at the core. - Forward-deployed intelligence. Live monitoring on approach, ingress and egress. Visual intelligence displayed immediately, wherever you are. - Dedicated analysts. Named intelligence analysts and executive threat assessment, with priority incident response when something moves against you. - Hardened everything. APT defense, hardware security modules, custom AI model training - built for principals who are actually targeted. - Deploys within the hour. A technical operator securing your position at all times - that is the product. Request Black Operations Running costs, plainly: encrypted infrastructure from $500/month - the servers, platforms, monitoring and automations that keep payments, purchasing, transport and field communications moving while you do. Local, disposable-level engagements; national and international operations priced per theater. Cancel monthly. Larger organization or several buildings? Ask about a custom enterprise deployment. Explainer 05 · 61 seconds · captions on Live network. The theater map by clearance level, the layers and legend, and start-to-end navigation on our own router. All six explainers → ## At a glance Carriers compared | Carrier | What it is | Status | Glasses | NINE40 security glasses, or a plugin for AR glasses you own | Glasses $225 a pair or $1,995 for 12; plugin date pending | Watch | A plugin, or the Courier camera smartwatch | Plugins in development; the Courier is priced on request | Ring | Cipher, Sentinel or Bastion | Cipher $25, Sentinel $55, Bastion on request The five layers of the Onion Protocol | Layer | Name | What it covers | 01 | Civil | Public areas: plaza, lobby and reception | 02 | Defense | Restricted zones: private floors and residences | 03 | Services | Emergency access: stairwells, service routes and responder paths | 04 | Aerial | Air networks: the roof, the mast and the building's private network | 05 | Core | Maximum security: the innermost rooms ## Questions people ask ## How do I get into a building without showing my ID? You verify your identity with Always Encrypted one time. After that, your device carries a sealed credential, and the building asks it one question: is this person cleared for this door now? The answer is yes or no. ## What does the building learn about me? It learns that you are verified, that you are cleared for the zone, and for what window. It never receives your name, face, date of birth, ID number or contact details. ## Do I need new glasses? No. A plugin for the AR glasses you already own is planned, with the public date still pending. NINE40 security glasses are available through a clearance request at $225 a pair or $1,995 for 12. ## Can I hold a meeting without a visitor log? Yes. You book a room in a participating building and each guest is checked for clearance to that room only. The building gets confirmation that everyone was cleared, not a list of who they were. ## Is Always Encrypted open to the public? It is invitation only and serves business clients. You start with a clearance request, which opens a briefing. ## Where to go next - NextRead the six explainer films. Sixty seconds each on exposure, verification, locations, countermeasures, the map and meetings. - NextRead the Learn guides. Short written guides that match the films. - NextRead the live theater map. Exposure levels, safety zones and four routes per trip. Request clearance ## Start with a briefing. Access is limited to qualified individuals and organizations. Tell us who you are and what you need. Requests are reviewed within 48 to 72 hours. - You send this request. It travels encrypted. - We review it and, if approved, schedule a private briefing. - You complete the one-time identity verification. ======================================================================== # Live theater map and private navigation URL: https://alwaysencrypted.com/network/ Skip to content ▸ LAYERS ▸ LEGEND High exposure - facial recognition active Elevated - cameras likely, civilians recording Moderate / safety-zone eligible Safety zone - blind spot, no signals needed Purple pin - private to you, or shared with you ▸ LIVE Navigation runs on open-source street maps. Your itinerary, target locations and communications never touch Google or any third party. ▸ ABOUT THIS MAP ## Live theater map The theater map shows where exposure is highest before you move. Layers cover access points, safety zones and live air traffic. Pick a start and an end and you get four routes ranked by what can see you, each with an operating procedure you can print. Map layers | Layer | Shows | Access points | Always Encrypted access points by exposure level | Safety zones | Blind spots where no signals are needed | Air traffic | Live civilian aircraft in the theater | Military and state aircraft | State and military aircraft, with heading and trail Exposure levels | Level | Color | Meaning | High | Red | Facial recognition is active | Elevated | Gold | Cameras likely, civilians recording | Moderate | Green | Fewer lenses; eligible as a safety zone ## Questions people ask ## How do I find the lowest-exposure route? Enter a start and an end in the Navigate panel. Each trip returns four routes: Lowest, Medium, High and Highest threat. Lowest is preselected. ## Does the map send my route to Google? No. Routes are worked out on our own server. Street tiles come through our server from OpenStreetMap, so OpenStreetMap sees our server's address, not yours. ## What do the exposure colors mean? Red marks high exposure where facial recognition is active. Gold marks elevated exposure where cameras are likely or civilians record. Green marks moderate exposure or a place eligible as a safety zone. ## What is a safety zone? A safety zone is a blind spot on the map where no signals are needed. Routes list the nearest ones as places to pause or abort. ## Can I print the operating procedure? Yes. Open Operating procedure after planning a trip and choose Print or save PDF. The document is built in your browser and nothing is uploaded. ## Where to go next - Nexthow the four threat-level routes work. The written guide to the planner and its procedure. - Nextthe live network explainer. A one-minute film of the layers and the legend. - Nextthe Always Encrypted app. The same map as an app you install from this site. Request clearance Map data from OpenStreetMap contributors. Learn · About · For AI assistants · Full text · Privacy ## Defeat exposure Facial recognition is active in public. Pedestrians and civilians record with phones, cameras and glasses - your face could be exposed to county, municipal, state, national or international actors. Counter it: NINE40 glasses940-nanometer spectrum - obscures facial geometry from LiDAR and facial-recognition capture. Get NINE40 Field watchEncrypted packet on your wrist - locations recognize you without a word spoken. View Field ringDiscreet credential - access without presenting anything. View Anonymous video chatDo not communicate verbally in public - move the conversation to an encrypted room. Open meeting Field guidance: no verbal communication unless necessary · wear a hat for additional facial-geometry concealment when your principal or team is in active engagement. ======================================================================== # Explainer films on verified access URL: https://alwaysencrypted.com/explainers/ Explainer series ## See how it works, in about a minute each. These six films explain Always Encrypted in about a minute each. They cover the exposure you carry in public, how verified access replaces your ID, how a location earns, what to do between the car and the door, the live theater map, and meetings that leave no visitor log. Explainer 01 · 61 seconds · captions on ## Exposed Your exposure in the open world today: ID scans, visitor logs, facial recognition, phone location, posts that say the house is empty, and the trail your car leaves. Explainer 02 · 61 seconds · captions on ## Walk in verified Verify once with one human auditor, then carry a sealed credential. Every door checks proof, never your name. The five layers of the Onion Protocol. Explainer 03 · 83 seconds · captions on ## Your location earns Add a home, a floor, a venue, a cab or a Tesla as an access point. Verified participants book it under their clearance; you are paid in Monero. Explainer 04 · 69 seconds · captions on ## Entering and exiting Countermeasures between the car and the door: NINE40 glasses, the hat, no verbal comms, watch and ring packets, arrival and departure protocol. Explainer 05 · 61 seconds · captions on ## Live network The theater map by clearance level, the layers and the legend, and start-to-end navigation on our own router. Explainer 06 · 61 seconds · captions on ## Meet without meeting Private rooms with no visitor log, and anonymous video chat with nothing to install, camera off, voice change and live translation. Request clearance Open the live network List a location ## At a glance The six explainer films | Film | Title | Length | 01 | Exposed | 61 seconds | 02 | Walk in verified | 61 seconds | 03 | Your location earns | 83 seconds | 04 | Entering and exiting | 69 seconds | 05 | Live network | 61 seconds | 06 | Meet without meeting | 61 seconds ## Questions people ask ## Where do I start if I only have a minute? Start with Walk in verified, the second film. It shows how one verification replaces your ID at every door. ## How long are the films? They run between 61 and 83 seconds. Every film has captions. ## Is there a written version? Yes. The Learn section has three written guides that match the films: exposure and countermeasures, how a sealed credential opens a door, and the four threat-level routes. ## Do the films track me? No. They play from this site with no third-party player and no analytics script. ## Where to go next - NextRead the written guides. The same material in reading form, with short FAQs. - NextRead the live theater map. See the layers from film five in use. - NextRead listing a location. Film three explains how a location earns. Open the network ======================================================================== # NINE40 camera glasses that carry your key URL: https://alwaysencrypted.com/glasses/ Always Encrypted glasses / made by NINE40 ## Camera glasses that carry your key. NINE40 glasses record 1080p video, hold 32 GB, and connect by Bluetooth 5.3 with Wi-Fi transfer to your phone. They also carry your Always Encrypted key, so they open doors in participating buildings without sharing your name. One pair is $225 and a dozen is $1,995. Allow 2 to 4 weeks for delivery. One pair$225A dozen, 12 pairs$1,995 How a door opens ## Walk up. The door asks. The glasses answer. The glasses are an active device: they prove they hold your private key every time, so a copy of the key is of no use to anyone else. 01 ## Your key is already on them We load your key before they ship. You renew or replace it from the Devices list in your account. 02 ## Walk up to the door The reader sends a short Bluetooth challenge. The glasses and the phone app answer it with a signature from your private key. 03 ## The latch releases The reader checks the signature, the expiry date and the revocation list. It logs a hashed device number and the time, never your handle. 04 ## Then the network The app on your phone holds the private map, pins, messages and routes worked out on our own router. The glasses carry the key and the camera. What it is ## A camera, 32 GB and a key, in a frame. Dark-framed glasses with a camera in the bridge. They record 1080p video, hold 32 GB, and send files to your phone over Wi-Fi. They carry your Always Encrypted key as well. - 1080p video camera - 32 GB storage - Bluetooth 5.3 - Wi-Fi transfer to your phone Active key: the device proves it holds your key at every door, so a copied key does not open anything. Recording laws differ by state and country. Wearers are responsible for following them where they wear the glasses. Already own AR glasses? A plugin is planned, and its public date is still pending. Pricing ## One pair, or a set for your people. Orders go through a clearance request, because every wearer completes the one-time identity verification before the glasses open anything. One pair $225 For one person who wants to move through participating buildings privately. Request a pair A dozen, 12 pairs $1,995 For security teams and staff, so the whole group carries the same kind of key. Request a dozen ## Delivery Allow 2 to 4 weeks for delivery: every device is tested on our bench and loaded with your key before it ships. ## Fulfilment Ships from our fulfilment partner. ## Returns and warranty Returns and warranty terms will be published here. ## At a glance NINE40 glasses at a glance | Item | Detail | Video | 1080p | Storage | 32 GB | Connection | Bluetooth 5.3, Wi-Fi transfer to your phone | Key tier | Active, with the phone app | One pair | $225 | A dozen, 12 pairs | $1,995 ($166.25 a pair) | Delivery | 2 to 4 weeks ## Questions people ask ## Do I need the app to use the glasses? Yes. You set up the key in the Always Encrypted app on your phone, and the glasses answer door checks with it. The camera files also move to the phone over Wi-Fi. ## What if I lose the glasses? Open the Devices list in your account and remove them. The door readers refresh their revocation list about every 5 minutes, so the glasses stop opening anything soon after. ## How is my name kept off the glasses? The key holds a random account handle and a random device number. It never holds your name, email or phone number, because we do not collect them. ## What do the glasses record and where does it go? They record 1080p video and store it on the glasses, which have 32 GB. You move files to your phone over Wi-Fi. Nothing is sent to us. ## How long until they arrive? Allow 2 to 4 weeks. Every pair is tested on our bench and loaded with your key before it ships. ## Do the glasses open doors without a phone nearby? The key is on the glasses, but the secure check uses the app on your phone. Carry the phone for the active key to work. ## Where to go next - NextRead the watches. Another active carrier for the same key. - NextRead the rings. Passive keys that need no battery. - NextRead every device in the line. One card per category, with prices. Request clearance ## Choose a pair and start the review. One pair, $225A dozen, $1,995 ======================================================================== # Camera smartwatch that carries your key URL: https://alwaysencrypted.com/watches/ Always Encrypted watches ## Your watch is the key. The Courier is an Android 12 smartwatch with a camera that rotates 190 degrees, a SIM slot, Wi-Fi, GPS and NFC. It carries your Always Encrypted key as an active key, so it answers a door reader's Bluetooth challenge without sharing your name. Pricing is on request. Allow 2 to 4 weeks for delivery. CourierPricing on requestPluginsIn development Our watch ## One watch, and it already runs Android. It carries the key as an active device. Everything below is true of the watch as listed by our supplier. We confirm each item on our bench before a watch ships. Camera smartwatch ## Courier smartwatch A graphite case on a black strap, running Android 12, with a camera that rotates 190 degrees. It has a SIM slot, Wi-Fi, GPS and NFC. - Android 12 - 190 degree rotating camera - 4G and 5G SIM slot, Wi-Fi, GPS - NFC and Bluetooth 4.2 Active key: the device proves it holds your key at every door, so a copied key does not open anything. Pricing on requestQuoted at your briefing Request a briefing The watch you already wear ## Plugins for other watches. Plugins that put the same key on an Apple Watch, a Wear OS watch or a Garmin are in development. None is in a store yet and there is no launch date. Request clearance and we will tell you when yours is ready. How a door opens ## Walk up. The door asks. The watch answers. The key tier decides how strict the check is. The card above says which tier each device carries. 01 ## Your key is already on it We load your key before it ships. The watch can also show the key as a QR image for readers that scan. 02 ## Raise it to the door The reader sends a Bluetooth challenge. The watch app answers it with a signature from your private key. 03 ## The latch releases The reader checks the signature, the expiry date and the revocation list, then opens. It logs a hashed device number and the time. 04 ## Then the network Sign in with the same account to get the private map, pins and routes worked out on our own router. ## Delivery Allow 2 to 4 weeks for delivery: every device is tested on our bench and loaded with your key before it ships. ## Fulfilment Ships from our fulfilment partner. ## Returns and warranty Returns and warranty terms will be published here. ## At a glance Watch options | Option | Type | Status | Courier | Android 12 camera smartwatch with NFC | Pricing on request | Apple Watch plugin | watchOS | In development, not in a store | Wear OS plugin | Samsung Galaxy Watch, Google Pixel Watch and others | In development, not in a store | Garmin plugin | Connect IQ | In development, not in a store ## Questions people ask ## Do I need the app to use the watch? Yes. The Always Encrypted app holds your private key and signs the door's Bluetooth challenge. If you would rather not run the app on the watch, the watch can show the key as a QR image. ## What if I lose the watch? Remove it from the Devices list in your account. Door readers refresh their revocation list about every 5 minutes, and the watch stops opening anything. ## How is my name kept off the watch? The key carries a random account handle and a random device number. Your name, email and phone number are not in it, because we never collect them. ## What does the watch cost? Pricing is on request. Send a clearance request and we quote it at your briefing. ## Does it work with Apple Watch, Wear OS or Garmin? Plugins for those watches are in development with no launch date and none is in a store yet. The Courier is a separate watch that already runs Android. ## How long until it arrives? Allow 2 to 4 weeks. Every watch is tested on our bench and loaded with your key before it ships. ## Where to go next - NextRead the glasses. The other active carrier. $225 a pair. - NextRead the rings. Passive keys with no battery. - NextRead the Always Encrypted app. Where the watch's key is made and removed. Request clearance ## Request the Courier and start the review. Courier smartwatch ======================================================================== # NFC rings that carry your access key URL: https://alwaysencrypted.com/rings/ Always Encrypted rings ## A ring that opens doors. Always Encrypted rings are black ceramic or titanium steel bands with an NFC chip inside. Tap one on a reader and the door checks your key, which holds no name. A ring has no battery and works without the app. Cipher is $25, Sentinel is $55 and Bastion is priced on request. Allow 2 to 4 weeks for delivery. Cipher$25Sentinel$55 Our rings ## Three rings. Two are black ceramic. Each ring has an NFC chip with room for one key. A ring has no battery: the reader powers it for the moment of the tap. Black ceramic ring ## Cipher ring A full black ceramic band with an NTAG216 chip inside. It holds 888 bytes, which is plenty for one key. - Black ceramic - NTAG216 chip, 888 bytes - Works with any NFC phone for setup Passive key: whoever holds it can open the doors you are cleared for until you remove it. $25Pre-order, ships from our fulfilment partner Request a briefing Black ceramic ring, waterproof ## Sentinel ring A black ceramic band with an NTAG216 chip, listed as rated IP68 so you can wear it in the shower or the pool. - Black ceramic - NTAG216 chip, 888 bytes - IP68 water resistance, to be confirmed on our bench Passive key: whoever holds it can open the doors you are cleared for until you remove it. $55Pre-order, ships from our fulfilment partner Request a briefing Titanium steel ring ## Bastion ring A black titanium steel band with a gold inner surface and an NFC chip. The only metal ring in the line. - Titanium steel, black with a gold inner surface - NFC chip Passive key: whoever holds it can open the doors you are cleared for until you remove it. Pricing on requestQuoted at your briefing Request a briefing How a door opens ## Walk up, tap, move through. The key tier decides how strict the check is. The card above says which tier each device carries. 01 ## Your key is already written We write one NFC record with your key before it ships. It holds a random handle and device number, not your name. 02 ## Tap the reader Hold it to the reader. It needs no battery and no app: the reader powers it for the moment of the tap. 03 ## The latch releases The reader checks the signature, the expiry date and the revocation list, then opens. It logs a hashed device number and the time. 04 ## Then the network Open the app on your phone, signed in with the same account, for the private map, pins and routes. ## Delivery Allow 2 to 4 weeks for delivery: every device is tested on our bench and loaded with your key before it ships. ## Fulfilment Ships from our fulfilment partner. ## Returns and warranty Returns and warranty terms will be published here. ## At a glance The three rings | Ring | Material | Price | Cipher | Black ceramic, NTAG216 | $25 | Sentinel | Black ceramic, NTAG216, IP68 listed | $55 | Bastion | Black titanium steel, gold inner surface | Pricing on request ## Questions people ask ## Do I need the app to use a ring? Not at the door. A tap on the reader is enough. You use the app or your account page once, to write the key to the ring, and again if you want to remove it. ## What if I lose the ring? Remove it from the Devices list in your account. Readers refresh their revocation list about every 5 minutes. Until then, whoever holds the ring can open the doors it is cleared for. ## How is my name kept off the ring? The ring holds a random account handle and a random device number in one NFC record. Your name, email and phone number are not on it. ## Can someone copy a ring? A passive key can be read by any NFC reader, so treat the ring like a house key. Remove it the moment it goes missing. For the secure tier, use the glasses or the watch. ## How long until a ring arrives? Allow 2 to 4 weeks. Every ring is tested on our bench and loaded with your key before it ships. ## Where to go next - NextRead the bracelet. A passive key in black stone. - NextRead fobs, pins and hidden tags. More passive carriers. - NextRead your Devices list. Where a ring's key is written, renewed or removed. Request clearance ## Choose a ring and start the review. Cipher ringSentinel ringBastion ring ======================================================================== # NFC bracelet that carries your access key URL: https://alwaysencrypted.com/bracelets/ Always Encrypted bracelets ## A bracelet that opens doors. The Obsidian bracelet is made of polished black stone beads with a gold accent and an NFC chip built in. Tap it on a reader and the door checks your Always Encrypted key, which holds no name. It needs no battery and no app at the door. It costs $175. Allow 2 to 4 weeks for delivery. Obsidian$175Key tierPassive Our bracelet ## Stone on the outside, a chip within. The Obsidian is a passive device. It opens a door on a tap, and the key on it holds no name. Black stone bracelet ## Obsidian bracelet A bracelet of polished black stone beads with a gold accent and an NFC chip built in. It reads as jewellery, because it is. - Black hematite or onyx beads, gold accent - NFC chip built in - No app needed to read it Passive key: whoever holds it can open the doors you are cleared for until you remove it. $175Pre-order, ships from our fulfilment partner Request a briefing How a door opens ## Walk up, tap, move through. The key tier decides how strict the check is. The card above says which tier each device carries. 01 ## Your key is already written We write one NFC record with your key before it ships. It holds a random handle and device number, not your name. 02 ## Tap the reader Hold it to the reader. It needs no battery and no app: the reader powers it for the moment of the tap. 03 ## The latch releases The reader checks the signature, the expiry date and the revocation list, then opens. It logs a hashed device number and the time. 04 ## Then the network Open the app on your phone, signed in with the same account, for the private map, pins and routes. ## Delivery Allow 2 to 4 weeks for delivery: every device is tested on our bench and loaded with your key before it ships. ## Fulfilment Ships from our fulfilment partner. ## Returns and warranty Returns and warranty terms will be published here. ## At a glance Obsidian bracelet at a glance | Item | Detail | Material | Black hematite or onyx beads with a gold accent | Chip | NFC, built in | Key tier | Passive | Price | $175 | Delivery | 2 to 4 weeks ## Questions people ask ## Do I need the app to use the bracelet? Not at the door. A tap is enough. You write the key once from your account page or at a verification visit. ## What if I lose the bracelet? Remove it from the Devices list in your account. Readers refresh their revocation list about every 5 minutes, and the bracelet stops opening anything. ## How is my name kept off the bracelet? It holds a random account handle and a random device number. Your name, email and phone number are never on it. ## Is it a real stone? The listing describes natural polished stone beads, black hematite or black onyx. We confirm the stone on our bench before we ship. ## How long until it arrives? Allow 2 to 4 weeks. Every bracelet is tested on our bench and loaded with your key before it ships. ## Where to go next - NextRead the rings. The same passive key in ceramic or steel. - NextRead fobs, pins and hidden tags. Carriers you can keep out of sight. - NextRead every device in the line. One card per category. Request clearance ## Request the bracelet and start the review. Obsidian bracelet ======================================================================== # NFC key fobs, lapel pins and hidden tags URL: https://alwaysencrypted.com/fobs/ Always Encrypted fobs, pins and hidden tags ## Fobs, pins and tags you never show. This page covers carriers you can keep out of sight: a black key fob, hidden tags and an anti-metal disc you build into leather or metal, and lapel pins. Each holds a passive Always Encrypted key with no name on it, and opens a door with a tap. Pricing is on request. Allow 2 to 4 weeks for delivery. Key fobOn requestHidden tagsOn request Our fobs, pins and tags ## Carriers that look like nothing. A fob goes on a key ring. A hidden tag goes inside something else. Both open a door on a tap. Key fob ## Black key fob A black teardrop fob with an NTAG215 chip that holds 504 bytes. It goes on a key ring and survives a wet pocket. - Matte black - NTAG215 chip, 504 bytes - IP68 water resistance, to be confirmed on our bench Passive key: whoever holds it can open the doors you are cleared for until you remove it. Pricing on requestQuoted at your briefing Request a briefing Hidden tag ## Hidden tag, 6 mm A 6 mm flexible NTAG213 inlay. It is built into a leather or metal object, so nothing on the surface shows that it is there. - 6 mm flexible inlay - NTAG213 chip - Built into a leather or metal item Passive key: whoever holds it can open the doors you are cleared for until you remove it. Pricing on requestQuoted at your briefing Request a briefing Hidden tag ## Anti-metal tag A thin white disc that reads on a metal surface. It goes under a plain shell or a leather panel. - Anti-metal backing - NTAG213 or NTAG215 chip - Sits under a shell or panel Passive key: whoever holds it can open the doors you are cleared for until you remove it. Pricing on requestQuoted at your briefing Request a briefing Lapel pins. A plain, unbranded metal pin that carries a passive key is being sourced. It is not listed yet. Ask about it in a clearance request and we tell you the date at your briefing. How a door opens ## Walk up, tap, move through. The key tier decides how strict the check is. The card above says which tier each device carries. 01 ## Your key is already written We write one NFC record with your key before it ships. It holds a random handle and device number, not your name. 02 ## Tap the reader Hold it to the reader. It needs no battery and no app: the reader powers it for the moment of the tap. 03 ## The latch releases The reader checks the signature, the expiry date and the revocation list, then opens. It logs a hashed device number and the time. 04 ## Then the network Open the app on your phone, signed in with the same account, for the private map, pins and routes. ## Delivery Allow 2 to 4 weeks for delivery: every device is tested on our bench and loaded with your key before it ships. ## Fulfilment Ships from our fulfilment partner. ## Returns and warranty Returns and warranty terms will be published here. ## At a glance Fobs, tags and pins | Item | Chip | Price | Black key fob | NTAG215, 504 bytes | Pricing on request | Hidden tag, 6 mm | NTAG213 | Pricing on request | Anti-metal tag | NTAG213 or NTAG215 | Pricing on request | Lapel pin | Being sourced | Pricing on request ## Questions people ask ## Do I need the app to use a fob or a tag? Not at the door. A tap is enough. You write the key once from your account page or at a verification visit. ## What if I lose the fob? Remove it from the Devices list in your account. Readers refresh their revocation list about every 5 minutes. Until then, whoever holds it can open the doors it is cleared for. ## How is my name kept off the fob? It holds a random account handle and a random device number. Your name, email and phone number are never on it. ## What is a hidden tag? A small NFC chip with no visible surface. We build it into a leather or metal item, so the object looks ordinary and the chip answers a reader that is held to it. ## Are lapel pins available? We are sourcing a plain, unbranded metal pin. Ask about it in a clearance request and we tell you the date at your briefing. ## How long until a fob arrives? Allow 2 to 4 weeks. Every device is tested on our bench and loaded with your key before it ships. ## Where to go next - NextRead the rings. Worn carriers with the same passive key. - NextRead the bracelet. Black stone, gold accent. - NextRead your Devices list. Where each key is written, renewed or removed. Request clearance ## Choose a carrier and start the review. Black key fobHidden tag, 6 mmAnti-metal tag ======================================================================== # Devices that carry your access key URL: https://alwaysencrypted.com/devices/ Always Encrypted devices ## Pick the device you will actually wear. Every Always Encrypted device carries the same sealed key and opens doors in participating buildings without your name. Glasses and the watch are active devices and use the phone app. Rings, the bracelet, fobs, pins and hidden tags are passive and open a door with a tap. Allow 2 to 4 weeks for delivery. Active keyGlasses, watchPassive keyRings, bracelet, fobs Every category ## Five kinds of device, one key. Each card links to its page. Glasses and the watch are active devices that use the phone app. Everything else is a passive device that opens a door on a tap. Active key ## Glasses Camera glasses with 32 GB and Bluetooth 5.3. From $225 a pair See glasses Active key ## Watches An Android camera smartwatch with NFC and a SIM slot. Pricing on request See watches Passive key ## Rings Black ceramic and titanium steel, NFC inside. From $25 See rings Passive key ## Bracelets Black stone beads with a gold accent. $175 See bracelets Passive key ## Fobs and pins A black fob, lapel pins and hidden tags. Pricing on request See fobs and pins ## Delivery Allow 2 to 4 weeks for delivery: every device is tested on our bench and loaded with your key before it ships. ## Fulfilment Ships from our fulfilment partner. ## Returns and warranty Returns and warranty terms will be published here. ## At a glance Devices compared | Device | Key tier | How it opens a door | Price | Glasses | Active | Bluetooth challenge with the phone app | $225 a pair | Watch | Active | Bluetooth challenge, or a QR image | Pricing on request | Rings | Passive | Tap on the reader | From $25 | Bracelet | Passive | Tap on the reader | $175 | Fobs, pins and tags | Passive | Tap on the reader | Pricing on request ## Questions people ask ## Which device should I start with? For the secure tier, take the glasses at $225. For something you can wear without thinking, take a ring from $25. ## What is the difference between an active and a passive key? An active device proves it holds a private key at every door, so a copy is useless. A passive device just sends its signed key, so whoever holds it can use it until you remove it. ## Do any of these need the app? Glasses and the watch do. Rings, the bracelet, fobs and tags open a door on a tap with no app. ## Where do I remove a lost device? In the Devices list on your account page. Door readers refresh their revocation list about every 5 minutes. ## How long does delivery take? Allow 2 to 4 weeks. Every device is tested on our bench and loaded with your key before it ships. ## Where to go next - NextRead the glasses. $225 a pair, 12 for $1,995. - NextRead the rings. Three rings from $25. - NextRead your Devices list. Add, renew or remove a key. Request clearance ## Choose a device and start the review. GlassesRingsWatch ======================================================================== # The app, installed from our own site URL: https://alwaysencrypted.com/app/ File 03 / Technology / App ## The Always Encrypted app The Always Encrypted app is a private app we build and publish ourselves. It is not in any app store, it sends no telemetry, and you install it from this site on Android, iPhone, Windows, macOS, Linux or Kali Linux. It gives you the map, routes, pins, messages and device keys. Installs as a web app on every platform today. Route: Lowest threatProcedure · step 2/6 Pick your platform for install steps What it does ## The network, in your pocket It is the same account you use on this site. Sign in with your username and password and everything below is there. ## Navigate the private network The theater map with access points, exposure levels and safety zones. Routes are worked out on our own server, not by a maps company. ## Four routes by threat level Each trip comes back as Lowest, Medium, High and Highest threat routes, with the time each one costs and an operating procedure you follow step by step. ## Purple pins and messages Private pins that only you see until you share one by handle or by a single-use link, and messages between handles about a pin or anything else. ## Your devices and keys Connect glasses, a watch, a ring, a pen or a tie clip to your account, renew their keys, and remove a lost one so doors stop accepting it. Open Devices ## Meeting rooms Join a private meeting room. Calls run over encrypted transport, and the audio and video are never stored on our servers. Permissions ## What it asks for, and why Each one is asked the first time you use the feature that needs it. Say no and the rest of the app keeps working. - CameraTo scan an AE Key QR code. The camera is on only while the scanner is open. The picture is read on the phone and never uploaded. - BluetoothTo release a door latch. The reader at the door sends a one-time challenge and the app signs it with the private key kept on your phone, so a copied code opens nothing. - LocationTo put you on the map and move the route along. Your position is used on the device only. When you ask for a route, the start and end you picked go to our router; no location history is kept or uploaded. What it never does ## Nothing reports on you ## No analytics No usage tracking, no crash reporter, no advertising ID. We do not count your taps or your trips. ## No third-party SDKs No ad, tracking, login or crash kits from other companies are built in. Sign-in, pins, messages and keys all run on our own server. ## No store accounts No Apple ID, Google account, email or phone number. Your account is a username and a password, and that is all we hold. One thing to know today: the web map's street tiles come from OpenStreetMap, but they pass through our own server first. OpenStreetMap sees requests from our server and never your IP address. Our server sees your tile requests, as it sees every request to this site. The map library and fonts load from alwaysencrypted.com, and the account page does not look addresses up anywhere. Map data from OpenStreetMap contributors. ## At a glance App permissions | Permission | Used for | Detail | Camera | Scanning an AE Key QR code | On only while the scanner is open; the picture is never uploaded | Bluetooth | Releasing a door latch | The app signs a one-time challenge with a key kept on the phone | Location | Showing you on the map | Used on the device; no location history is kept or uploaded ## Questions people ask ## Is the app in the App Store or Google Play? No. We publish it ourselves and you install it from this page. There is no store account to create. ## Does the app track me? No. It has no analytics, no crash reporter, no advertising ID and no third-party SDKs. ## Why does it ask for camera, Bluetooth and location? Camera scans an AE Key QR code. Bluetooth releases a door latch. Location puts you on the map. Each is asked the first time you use that feature, and the app keeps working if you say no. ## What do I sign in with? A username and a password, the same account you use on this site. We hold no email address or phone number. ## Which devices can install it? Android, iPhone, Windows, macOS, Linux and Kali Linux. Today it installs as a web app on every platform. ## Where to go next - NextRead your Devices list. Connect glasses, a watch, a ring or a pen and renew their keys. - NextRead the theater map. The map the app opens on. - NextRead how a door opens. What the Bluetooth challenge does. Add a device ======================================================================== # List a location and earn for access URL: https://alwaysencrypted.com/locations/ Skip to content Hosts & access points ## Your location earns. Nobody knows it's yours. You can list a space you control as a private access point and earn when verified participants use it. Tiers start at $40 a visit for a room, deck or vehicle and $500 a month for a building floor. Payouts settle in Monero, and only Always Encrypted knows the listing is yours. ## Earnings tiers ## Access point from $40 / visit A room, deck, patio or vehicle made available to a verified participant. You set availability windows; access is granted packet-to-lock, no names exchanged. ## Experience venue from $150 / visit Distinctive spaces - rooftop lounges, terraces, private dining rooms - that are destinations in themselves. Premium placement in participant routing. ## Building & floor partner from $500 / month Whole floors, lobbies, elevators and reception ports integrated into the Onion Protocol's layered access, with recurring monthly placement revenue. ## Vehicle & vessel from $80 / leg SUVs, cabs, aircraft and boats that carry participants between access points - each completed, verified leg pays out automatically. Payouts settle in privacy-preserving cryptocurrency - Monero first - through encrypted payment rails. No public ledger ties a payout to your address or your property. ## What an experience looks like Mock examples of the caliber of spaces joining the network: Las Vegas - off the Strip ## The Yard Deck An elevated back deck behind a Strip-facing venue - string-lit, private, city noise below. Participants arrive through the service corridor; the deck answers their packet, not their name. MOCK EXAMPLE - illustrative listing Downtown - second story ## The Mezzanine Patio A second-story patio above a quiet restaurant - sightlines in every direction, one stair, one host. The kind of room the elite choose when the conversation is the agenda. MOCK EXAMPLE - illustrative listing Coastal - rooftop ## The Signal Roof A rooftop reception port with aerial access - arrive by elevator or by drone port. Full packet-recognition entry, egress on your schedule, no visitor log at the door. MOCK EXAMPLE - illustrative listing ## Already listed elsewhere? Add the badge. If your property, rental or venue already lives on another platform or your own site, you don't move anything - you add one line. The AE Access badge - our mark and a hyperlink - sits on your existing listing or profile. People see it and wonder what it is. The ones who know, know. AE Access AE Access means this location participates in the Always Encrypted network. Verified participants hold an encrypted packet on their own devices; the location recognizes the packet and grants access under their clearance level. No names, no visitor logs, no third-party data - identity is verified once, by one human auditor, and never touches AI or third-party APIs. Paste this into any listing, bio or profile: AE Access ## Share access by SMS or QR Generate your access link below, then share it by text message or QR code - the recipient opens it, sets up their profile, verifies once, and your location (or any in your network) recognizes them. Share by SMS ## Only we know Your location's presence in the network, its address, and its payout destination are held solely by Always Encrypted - on our own servers, backed up every 24 hours to one encrypted, privately owned off-site location. Nothing touches AI, third-party APIs or LLMs. Participants see a packet challenge at the door; the public sees whatever you choose to show them. Add your locationVerify your identity first ## At a glance Earnings tiers | Tier | Starting rate | What it is | Access point | $40 a visit | A room, deck, patio or vehicle | Experience venue | $150 a visit | Rooftop lounges, terraces, private dining rooms | Building and floor partner | $500 a month | Floors, lobbies, elevators and reception ports | Vehicle and vessel | $80 a leg | SUVs, cabs, aircraft and boats ## Questions people ask ## What can I list? A home, a back deck, a patio, a building floor, a lobby, a vehicle or a vessel: any space you control. ## How much does a location earn? An access point starts at $40 a visit, an experience venue at $150 a visit, a building or floor partner at $500 a month, and a vehicle or vessel at $80 a leg. ## How am I paid? In Monero first, through encrypted payment rails, so no public ledger ties a payout to your address or property. ## Who knows my location is on the network? Only Always Encrypted. Participants see a packet challenge at the door, and the public sees whatever you choose to show. ## Do I have to move my existing listing? No. You add a one-line AE Access badge to the listing you already have. ## Where to go next - NextRead verifying your identity. Listing starts with one verification. - NextRead your account and map. Place your locations on the world map. - NextRead the Your location earns film. Film three, 83 seconds. Request clearance Explainer 03 · 83 seconds · captions on Your location earns. Add a home, a floor, a venue, a cab or a Tesla as an access point and get paid in Monero. All six explainers → ======================================================================== # Verify your identity once with a human URL: https://alwaysencrypted.com/verify/ Skip to content Identity, held by you ## Verify once. Carry proof everywhere. You verify your identity with Always Encrypted one time. One human auditor checks it, and the record never touches AI or third-party APIs. Your phone, watch, ring or glasses then carry an encrypted packet, and every participating location answers yes or no without learning your name. ## How verification works - You submit once. Provide your identity details through your anonymous account. Full name and organization remain optional on the account itself - verification data is held separately and sealed. - Knowledge-based confirmation. Through our identity-verification tooling, we relay three recognizable data points back to you - the same class of questions any credit or identity service asks. You confirm which are associated with you. No documents are uploaded to third parties. - One human auditor validates. Exactly one vetted human auditor on our staff validates identities. Your information never touches artificial intelligence, third-party APIs, or LLMs, and it never leaves our servers. - You hold the keys. On approval, your phone, watch, rings, VR and augmented-reality glasses receive an encrypted packet keyed to you. You hold the private keys to your identity on Always Encrypted - the network recognizes the packet, not your name. - Move. Every participating location, vehicle and building recognizes you as a participant and opens the layers your clearance level covers - so you can take care of business or private affairs, securely, without exposing your credentials. ## The total exposure of your identity We state it plainly, because privacy is the product: ## One human auditor Identity validation is performed by a single vetted human being. No committee, no queue, no offshore review farm. ## No AI, no third parties Your identity information never touches artificial intelligence, third-party APIs or LLMs, and is never shared outside our own network of companies. ## Never leaves our servers Verification records live only on infrastructure we own and operate. ## One encrypted off-site backup Servers are backed up every 24 hours to a privately owned, encrypted off-site location we control. That is the complete exposure surface - our servers, and one encrypted backup. That's it. One human auditor. Our servers. One encrypted off-site backup every 24 hours. No AI, no third-party APIs, no LLMs, no list-sharing - ever. ## What your devices receive Once verified, each enrolled device - phone, watch, ring, VR headset, AR glasses - carries an encrypted packet matched to participating locations. Locations challenge the packet; the packet proves clearance; the door answers yes or no. Your name, documents and biometrics are never presented, transmitted or stored at the location. Create your anonymous accountList a location instead ## At a glance Who sees your identity record | Party | Sees the record? | One vetted human auditor | Yes, to validate it | AI, LLMs and third-party APIs | Never | A participating building | No. It receives yes or no. | One encrypted off-site backup, every 24 hours | Holds a sealed copy that we control ## Questions people ask ## Who looks at my identity information? One vetted human auditor on our staff. It never touches AI, third-party APIs or LLMs. ## Where is the record stored? On servers we own and run, with one encrypted off-site backup every 24 hours. That is the full exposure surface. ## Do I upload documents? No documents go to third parties. You answer knowledge-based questions and confirm which data points are associated with you. ## How many times do I verify? Once. One verification unlocks every participating location, vehicle and building. ## What do my devices receive? An encrypted packet keyed to you. Locations challenge the packet and the door answers yes or no. ## Where to go next - NextRead your account. Create an anonymous account with a username and password. - NextRead how a sealed credential opens a door. What happens after you are verified. - NextRead listing a location. Verified accounts can list spaces that earn. Request clearance ======================================================================== # About us, a private access network URL: https://alwaysencrypted.com/about/ About ## About Always Encrypted Always Encrypted operates a private access network for business clients. We verify identities once, issue sealed credentials, and run the map, routes and meeting rooms that go with them. We send no telemetry to third parties and publish no app in any store. ## What do we do? We run a private access network. A person verifies their identity once with us and then carries a sealed credential on glasses, a watch, a ring or a phone. Participating buildings, vehicles and venues check the credential and answer yes or no. On top of that we operate a theater map with our own router, private meeting rooms, and a small app that we publish ourselves. ## What do we not do? - We send no telemetry to third parties. The site has no analytics script, and maps, fonts and scripts load from alwaysencrypted.com. - We put no app in any app store. You install it from this site. - We do not sell to individuals outside a business engagement. Services are for business clients, as the terms state. - We never claim more than we deliver. Calls use encrypted transport, and media is not stored on our servers. ## Who runs it? Always Encrypted is operated by Start My Business Inc. The privacy policy and the terms name the operator and the governing rules. Identity verification is done by one human auditor and never touches AI or third-party APIs. ## What do we offer? Products and where to read about them | Product | Status | Page | NINE40 security glasses | Order through a clearance request, $225 a pair or $1,995 for 12 | Glasses | Watch plugins | In development, no launch date | Watches | Courier camera smartwatch | Pricing on request | Watches | Cipher, Sentinel, Bastion rings | From $25 | Rings | Digital Access Panel and Physical Access Terminals | Available now | Availability | App | Installs from this site | App ## How do I reach us? Email support@alwaysencrypted.com. To start a business engagement, request clearance and we will set up a briefing. Our legal pages are the privacy policy, the terms and the electronic signature consent. ## Questions people ask ## Who operates Always Encrypted? Start My Business Inc. operates Always Encrypted. Its site is startmybusiness.us. ## Who are your customers? Business clients only. Services are offered on that basis, and the terms say so. ## What data do you send to third parties? None. There is no analytics script, no third-party font or script host, and street map tiles come through our own server. ## How do I contact you? Email support@alwaysencrypted.com. We answer by email. ## Where to go next - NextRead the Learn guides. How the system works, in reading form. - NextRead the privacy policy. What we collect and why. - NextRead the app. Published by us, with no store account. Request clearance ======================================================================== # Learn how private verified access works URL: https://alwaysencrypted.com/learn/ Learn ## Learn how private verified access works This is the Always Encrypted learning hub. It holds three short written guides and links to the six explainer films. The guides cover exposure and countermeasures, how a sealed credential opens a door, and how the four threat-level routes and the operating procedure work. ## Written guides - Exposure levels and countermeasuresWhat a high, elevated and moderate exposure level means on the map, which lenses create it, and the countermeasures that apply between the car and the door. - How a sealed credential opens a doorFollow one door from challenge to release: what the credential holds, what the building asks, why it learns only yes or no, and how a lost device is revoked. - Four threat-level routes and the operating procedureEvery trip returns four routes ranked by exposure, from Lowest to Highest threat, and a six-section operating procedure you can print. Here is how to read them. ## Explainer films - ExposedYour exposure in the open world today, from ID scans to the trail your car leaves. - Walk in verifiedOne verification, one sealed credential, and doors that check proof. - Your location earnsHow a home, a floor or a vehicle becomes an access point. - Entering and exitingCountermeasures between the car and the door. - Live networkThe theater map, its layers and start-to-end navigation. - Meet without meetingPrivate rooms with no visitor log and anonymous video chat. ## Questions people ask ## Where should a new visitor start? Start with the guide on how a sealed credential opens a door. It explains the one idea the rest of the site builds on. ## Are the guides the same as the films? They cover the same material in reading form, with more detail and a short FAQ under each guide. ## Can I cite a guide? Yes. Each guide ends with a cite line that gives its canonical address. ## Who writes the guides? The Always Encrypted team writes and reviews them. Production is human-directed and AI-assisted. ## Where to go next - NextRead the six explainer films. About a minute each, with captions. - NextRead the live theater map. Use what the guides describe. - NextRead about Always Encrypted. Who runs the network and what we do not do. Watch the explainers ======================================================================== # Exposure levels and countermeasures URL: https://alwaysencrypted.com/learn/exposure-levels-and-countermeasures/ Guide ## Exposure levels and countermeasures Exposure is how many lenses and records can tie you to a place and a time. The map rates it high, elevated or moderate. Countermeasures are the habits and gear that cut it: eyewear that defeats facial capture, a hat, silence in public, and a credential that shows a door nothing but yes. Updated 2 November 2026 · about 3 minute read Most people think of surveillance as one camera on one pole. In practice it is a stack of small systems that each record a slice of your day: an ID scan at a front desk, a visitor log that outlives the visit, a plate reader at a toll, a phone that reports its own position, and a stranger filming a street scene. Exposure is the sum of those slices in one place at one time. ## What do the exposure levels mean? The theater map sorts places into levels so you can see the stack before you step into it. The legend uses three colors, and the route planner reuses them. Exposure levels on the theater map | Level | Color | What it means | What to do | High | Red | Facial recognition is active in public here. | Cover facial geometry, say nothing, keep moving. | Elevated | Gold | Cameras are likely and civilians are recording. | Keep eyewear on and your phone locked and out of view. | Moderate | Green | Some lenses, fewer records. Eligible as a safety zone. | Use it to pause, regroup or abort. A safety zone is a blind spot. It is a place where nothing on the map suggests a lens, so you do not need to signal anyone to be there. ## Where does exposure come from? The planner counts what sits within 120 m of a driving path, or 60 m of a walking or cycling one. Border crossings weigh the most. Airports, toll plazas, stations, police posts, speed cameras and surveillance points follow, each with its own weight. Access points rated high or elevated add to the score as well. The result is a number from 0 to 100, which becomes low, moderate, elevated or high. Air traffic matters too. The map shows live civilian aircraft in teal and state or military aircraft in red, with a heading line and a short trail, because a low orbit over a block is a lens as well. ## Which countermeasures apply between the car and the door? The countermeasures are habits first and gear second. We list the ones the planner prints on every procedure. - Eyewear. NINE40 glasses work in the 940 nanometer band. NINE40 states that this obscures facial geometry from LiDAR and facial-recognition capture. Treat that as the maker's claim and keep the other habits. - A hat adds concealment when you or your principal is in an active engagement. - No speech in public. Speech can be recorded and tied to your face. If a conversation cannot wait, move it to an encrypted room. - No phone unlock in view of a lens. A thumb on a screen near a camera gives away more than people expect. - Cash or Monero at tolls, with the window up and your head turned at plate readers. - Let the packet open the door. At our access points your watch or ring answers the challenge, so you present nothing and say nothing. ## What do countermeasures not do? They do not erase you. A toll plaza still logs a plate, and a street camera still records a street. The aim is narrower: to make sure the record that exists says as little about you as possible. That is also why identity is split out. Verification happens once, with one human auditor, and every door afterward gets a yes or no. For the other half of the picture, read how a sealed credential opens a door. To see levels on a real route, open the live theater map. Cite this page: Always Encrypted, "Exposure levels and countermeasures", https://alwaysencrypted.com/learn/exposure-levels-and-countermeasures/, updated 2 November 2026. ## Questions people ask ## What is the difference between high and elevated exposure? High means facial recognition is active in that place. Elevated means cameras are likely or civilians are recording with phones, cameras and glasses. ## Do the countermeasures make me invisible? No. They reduce what a lens or a log can capture. They do not remove a place from the public record. ## Why should I avoid speaking in public? Speech can be recorded and tied to your face and location. Move the conversation to an encrypted room instead. ## Where do I see exposure on a route? The theater map lists exposure points along each route with their distance and the matching countermeasures. ## Where to go next - NextRead how a sealed credential opens a door. The access side of the same problem. - NextRead the four threat-level routes. Choose how much exposure a trip carries. - NextRead the live theater map. See exposure levels on the map. Open the network ======================================================================== # How a sealed credential opens a door URL: https://alwaysencrypted.com/learn/how-a-sealed-credential-opens-a-door/ Guide ## How a sealed credential opens a door A sealed credential opens a door by answering one question: is this person cleared for this door now? The door sends a challenge, the device answers it, and the access point releases the lock on a yes. The building never receives a name, a face or an ID number. Updated 2 November 2026 · about 2 minute read A normal building learns who you are by collecting it: a name at the desk, an ID scan, a badge photo, a log that stays on a server long after you leave. Always Encrypted splits those jobs. Your identity is checked once, by us. After that, a door only needs to know whether you are allowed through it. The rest of this guide follows one door from the first challenge to the release, and explains why the building ends up knowing so little. ## What happens, step by step? - You verify once. You answer knowledge-based questions and one human auditor validates the result. The record stays on servers we run. - Your device receives a packet. It is an encrypted, signed statement that you passed verification and which clearances you hold. It has no name, photo or ID number. - You reach a door. The access point sends a one-time challenge. - The device answers. A phone, or glasses or a watch running the app, signs the challenge with a private key generated on the device. A ring or pen shows its signed packet. - The access point decides. It checks the signature and your clearance for that zone and window, then releases the lock on a yes. ## What does the building learn? What a participating building does and does not receive | The building receives | The building never receives | Identity verified: yes | Your name | Cleared for this zone: yes or no | Your face or photo | Clearance window: now | Date of birth, ID or passport number | | Home address, phone or email ## Passive keys and active keys: which is safer? An active key signs a fresh challenge every time, so a copied code opens nothing. A passive key holds only the signed packet, which makes it a bearer credential: whoever wears the ring or carries the pen can tap in until the key is removed or expires. Passive keys trade some safety for convenience. If you pick one, treat it like a door key. Carriers compared | Carrier | Type | Proof at the door | Phone, or glasses and watch running the app | Active | Signs a one-time challenge | Ring, pen, tie clip, bracelet | Passive | Shows the signed packet | QR code | Passive | Shows the signed packet ## What if a device is lost? Readers check the signature, the expiry date and a revocation list that syncs about every 5 minutes, so a removed key fails even if the device still holds the packet. Remove the key from your account or the app. The key is revoked and doors stop accepting it. You can renew a key before it expires from the same list. The key checker shows whether a given key is still valid, and it posts the key in a request body rather than in the address, because a passive key is a credential. Keys last 30 days and can be renewed from the same list; a reader treats an expired key as no key. The same flow carries into wearables. Read about the glasses, the watches and the rings, or go back to exposure levels and countermeasures for what the credential keeps out of view. Cite this page: Always Encrypted, "How a sealed credential opens a door", https://alwaysencrypted.com/learn/how-a-sealed-credential-opens-a-door/, updated 2 November 2026. ## Questions people ask ## What is inside a credential? A signed statement that you passed verification and the clearances you hold. It has no name, photo or ID number. ## What is the difference between a passive and an active key? A passive key, such as a ring, pen or tie clip, holds only the signed packet. An active key, such as a phone or the watch app, also signs a fresh challenge from the door. ## What happens if I lose a device? Remove its key in the Always Encrypted app or on your account. Doors then stop accepting it. ## Can a copied code open a door? Not for an active key. The door sends a one-time challenge that only the private key on your device can sign. ## Where to go next - NextRead exposure levels and countermeasures. What the credential keeps out of lenses and logs. - NextRead the four threat-level routes. Plan the trip to the door. - NextRead verifying your identity. The one-time step before any of this. Open the network ======================================================================== # Four threat-level routes explained URL: https://alwaysencrypted.com/learn/four-threat-level-routes/ Guide ## Four threat-level routes and the operating procedure Every trip on the theater map returns four routes ranked by exposure: Lowest, Medium, High and Highest threat. You trade time for fewer lenses. Each route comes with a six-section operating procedure that you follow step by step and can print. Updated 2 November 2026 · about 2 minute read A single fastest route is a fine answer when time is the only cost. It is a poor answer when the road passes a toll plaza, two plate readers and a station full of cameras. The theater map treats exposure as a cost too, so every trip comes back as four routes you can compare. ## What are the four routes? The four threat-level routes | Route | How it is built | When to choose it | Lowest threat | The fastest route first, then every exposure cluster it touches is excluded, repeated until no new high or elevated point sits on the path. | Default. Slowest, with the fewest lenses. | Medium threat | The fastest route with the heaviest clusters excluded once, and tolls off. | When time matters and some exposure is acceptable. | High threat | The plain fastest route, through the city. | When speed wins. The time saved against Lowest is shown. | Highest threat | A short route that threads city streets and dense cores, with the most lenses per kilometer. | Rarely. We recommend an escort. If the router returns fewer than four distinct paths, you see what exists and the levels are assigned by exposure rank. ## Which modes does the planner cover? Drive, cab, walk, bike and transit each get their own four routes. A mode that has no data in an area is dimmed with a one-line reason, and the planner falls back to a drive-only route if the full planner is unreachable. Coverage is North America today. ## How do I read a route? The chosen route is drawn in gold. The other routes in that mode appear as dashed ghosts in their level color: teal, gold, orange and red. Each row shows time, distance, the difference from the fastest, and an exposure pill from low to high. Below the map you get the exposure points along the path with their distance, the safety zones nearby, and the itinerary. State aircraft near a route are counted on its row. ## What is in the operating procedure? The procedure has six sections. - Summary gives from, to, mode, distance, time and exposure, with one sentence on why the level is what it is. - Before you leave is a gear checklist for the mode. - Route, segment by segment puts exposure events inline at their distance, for example "At 2.3 km: toll plaza, plate capture likely. Keep glasses on, pay cash or Monero, no conversation." - Abort and fallback points names the nearest safety zones and the lowest-exposure alternative mode. - Arrival gives the approach for the destination. - Communications points to a private meeting room and to the rule for sharing pins. The text comes from fixed templates, so the same trip always yields the same procedure. You can print it or save it as a PDF, and the page never uploads it. ## What leaves my browser? Only the start and end you chose, sent to our own router. We do not use a third-party maps company. Street tiles are relayed through our server from OpenStreetMap. Learn what each level means in exposure levels and countermeasures, then plan a trip. Cite this page: Always Encrypted, "Four threat-level routes and the operating procedure", https://alwaysencrypted.com/learn/four-threat-level-routes/, updated 2 November 2026. ## Questions people ask ## Which route should I pick? Lowest threat is preselected and takes the most time. Medium saves time when it matters. High is the plain fastest route. Highest threads dense city cores and carries an escort recommendation. ## Which travel modes are covered? Drive, cab, walk, bike and transit. A mode that is not yet available in an area is dimmed with a one-line reason. ## Is the procedure written by an AI? No. It is built from fixed templates on our server, so the same trip always gives the same text. ## What leaves my browser when I plan a trip? The start and end you picked go to our own router. The procedure is built and printed in your browser. ## Where to go next - NextRead exposure levels and countermeasures. What the exposure score is made of. - NextRead how a sealed credential opens a door. What happens at the end of the route. - NextRead the Navigate panel. Plan a trip now. Open the network