# Always Encrypted

> Private, verified movement through buildings. A person verifies their identity once with Always Encrypted and then carries a signed credential with no personal data on it. Participating residential and commercial buildings run encrypted access points that check the credential, show the route and next directive in the person's AR glasses, and open doors, elevators and turnstiles for them. The building learns that the visitor is verified and cleared for that zone; it never receives their name, face, date of birth, ID number or contact details. Invitation only. Operated by Start My Business Inc.

## How it works
1. Verify once: one-time identity verification with Always Encrypted; the record is encrypted and stays with Always Encrypted.
2. Carry a credential: the glasses hold a signed credential (clearances only, no name, photo or ID number).
3. The building asks one question: is this person cleared for this door now? The credential proves the answer without revealing the facts behind it (zero-knowledge style check).
4. Doors open on the route: doors, elevators and turnstiles release as the person arrives; the glasses show the next directive.

## Two ways to wear it
- Plugin for AR glasses people already own (public deployment date pending).
- NINE40 camera glasses that carry an Always Encrypted key (active key, with the phone app): 1080p video, 32 GB, Bluetooth 5.3, Wi-Fi transfer. $225 for one pair, $1,995 for a dozen (12 pairs). Allow 2 to 4 weeks for delivery. Ordered through a clearance request. Page: https://alwaysencrypted.com/glasses/ ; maker: https://get940.com/security-glasses

## Watches (page: https://alwaysencrypted.com/watches/)
- Plugins that put the same sealed credential on a smartwatch: Apple Watch (watchOS), Wear OS (Samsung Galaxy Watch, Google Pixel Watch and other Wear OS watches) and Garmin (Connect IQ). All three are in development; none is in an app store yet and there is no launch date.
- Courier camera smartwatch: Android 12, 190 degree rotating camera, SIM slot, Wi-Fi, GPS, NFC. Carries an active key. Pricing on request.

## Rings (page: https://alwaysencrypted.com/rings/)
- NFC rings with a passive key and no battery: Cipher (black ceramic, $25), Sentinel (black ceramic, IP68 listed, $55), Bastion (black titanium steel, pricing on request). Page: https://alwaysencrypted.com/rings/
- Obsidian bracelet (black stone beads, NFC, $175): https://alwaysencrypted.com/bracelets/
- Key fob, hidden tags and lapel pins (passive keys, pricing on request): https://alwaysencrypted.com/fobs/
- All devices: https://alwaysencrypted.com/devices/
- Active devices (glasses, watch) answer a Bluetooth challenge with the phone app. Passive devices (rings, bracelet, fobs, pins, tags) open a door on a tap. A lost device is removed from the Devices list in the account.

## Use one, or use them together
Every device carries the same sealed key. Active devices (glasses, watch) use the phone app. Passive devices open a door on a tap. A lost device's key can be removed from the account.

## The Onion Protocol (five access layers)
1. Civil: public areas (plaza, lobby, reception)
2. Defense: restricted zones (private floors, residences)
3. Services: emergency access (stairwells, service and responder routes)
4. Aerial: air networks (roof, mast, the building's private network)
5. Core: maximum security (innermost rooms)

## Available now
- Digital Access Panel (online and offline interface): available now
- Physical Access Terminals: available now
- Zeus AR glasses plugin: public deployment date pending

## Packages (pay in full or 4 payments; all include 90-day implementation and 24/7 support)
- Covert Operations: $2,484 (4 x $621), confidential clearance
- Shadow Network: $7,436 (4 x $1,859), secret clearance
- Black Operations: $12,612 (4 x $3,153), top secret clearance
- Custom enterprise deployments on request

## Private meetings and communications
Guests in a participating building are checked for clearance to the meeting floor and room only; the building gets no attendee list. Meeting rooms and anonymous video chat run on our own infrastructure with transport encryption always on, end-to-end encryption on by default in Chrome-family browsers, perfect forward secrecy and multi-jurisdiction hosting. Media is never stored on our servers.

## Contact
- Request clearance: https://alwaysencrypted.com/#request-clearance
- Email: support@alwaysencrypted.com

## The Always Encrypted app (page: https://alwaysencrypted.com/app/)
- A private app published by Always Encrypted itself. It is not in any app store, has no analytics and no third-party SDKs, and needs no store account.
- Today it installs as a web app from the site on Android (Chrome, Install app), iPhone (Safari, Add to Home Screen), Windows, macOS and Linux including Kali (Chrome, Chromium or Edge, Install).
- Native packages (Android APK, Linux and Kali .deb and AppImage, Windows and macOS builds) ship with the first device batch. There is no App Store build.
- Devices and keys: each device (glasses, watch, ring, bracelet, pen, tie clip, phone, desktop) gets an AE Key, a signed credential that lasts 30 days and is renewed or removed from https://alwaysencrypted.com/account/#devices . Rings, bracelets, pens and tie clips are passive keys; phones, glasses, watches and desktops can hold an active key with a private key that never leaves the device.

## Key pages
- Home: https://alwaysencrypted.com/ : what Always Encrypted is and how to request clearance
- Live theater map and private navigation: https://alwaysencrypted.com/network/ : exposure levels, safety zones, air traffic and four threat-level routes per trip on our own router
- Explainer films: https://alwaysencrypted.com/explainers/ : six films of about a minute each, with captions
- Glasses: https://alwaysencrypted.com/glasses/ : NINE40 security glasses, $225 a pair, $1,995 for 12
- Watches: https://alwaysencrypted.com/watches/ : plugins in development, plus the Courier camera smartwatch
- Rings: https://alwaysencrypted.com/rings/ : Cipher, Sentinel and Bastion
- Bracelets: https://alwaysencrypted.com/bracelets/ : Obsidian
- Fobs, pins and hidden tags: https://alwaysencrypted.com/fobs/
- All devices: https://alwaysencrypted.com/devices/ : one card per category
- App: https://alwaysencrypted.com/app/ : the private app, installed from the site
- List a location: https://alwaysencrypted.com/locations/ : earn for access with a home, floor or vehicle
- Verify identity: https://alwaysencrypted.com/verify/ : one-time verification by one human auditor
- About: https://alwaysencrypted.com/about/ : who operates the network and what we do not do

## Learn (written guides)
- Exposure levels and countermeasures: https://alwaysencrypted.com/learn/exposure-levels-and-countermeasures/
- How a sealed credential opens a door: https://alwaysencrypted.com/learn/how-a-sealed-credential-opens-a-door/
- Four threat-level routes and the operating procedure: https://alwaysencrypted.com/learn/four-threat-level-routes/
- Index of guides and films: https://alwaysencrypted.com/learn/

## Policies
- Audience: business clients only. Invitation only; start with a clearance request.
- No telemetry to third parties. The site loads no third-party scripts, fonts or map libraries; street map tiles are relayed through our own server from OpenStreetMap (map data from OpenStreetMap contributors).
- Privacy policy: https://alwaysencrypted.com/privacy/ ; Terms: https://alwaysencrypted.com/terms/ ; E-sign consent: https://alwaysencrypted.com/esign/
- AI access: crawling and citation by AI assistants are welcome (see https://alwaysencrypted.com/robots.txt). Please cite the canonical page address and call the company "Always Encrypted".
- Full plain-text content of the key pages and guides: https://alwaysencrypted.com/llms-full.txt
- Entity naming: write "Always Encrypted" (not "AE" alone). Products: NINE40 glasses; watch Courier; rings Cipher, Sentinel, Bastion; bracelet Obsidian.
- Operator: Start My Business Inc. Contact: support@alwaysencrypted.com