Logo

Highly Secure Corporate Messenger

A highly secure mobile messenger for internal communications in a large organization with a distributed team and strict information security regulations.

Industry:
Corporate Security /Internal Communications
Type:
Mobile App (iOS + Android)
Timeline:
4 months
Platform:
iOS + Android

[client]

/01

The client is a large company with a distributed structure and strict requirements for information security.

Using popular messengers did not allow them to control communication format, prevent data leaks, or track execution.

They needed a tool combining the security level of enterprise systems with the convenience of a mobile messenger.

[key features]

/02

Secure Communication Structure

Organized dialogs by roles, departments, and topics. Communication is only possible within predefined routes.

Proprietary Encryption Protocol

End-to-end encryption and complete infrastructure isolation. Messages are not stored on devices without an access key.

Communication Analytics & Control

Activity monitoring, event logging, behavioral analytics, export on request from security and top management.

Formalized Communication Scenarios

Sending messages as reports, notifications, and requests. All are recorded in the system.

Built-in Access Hierarchy

Send, receive, comment, and escalation rights — by task, position, and structure.

[our responsibility]

/03
Designing the role model, routing, and message templates
UX/UI design of the mobile application
Backend infrastructure and encryption protocol development
iOS and Android application implementation
Integration with the client's internal IAM and SIEM systems

[the client had]

/04
Clear information security and access policy requirements
A set of standard inter-department interaction scenarios
Own servers and data isolation policies
Secure Messenger mobile application

[key users]

/05

Employee

Sends messages using templates (requests, reports, incidents), confirms receipt, and follows instructions

Department Head

Receives requests from the team, approves, escalates, and monitors execution

Security Service

Tracks events, identifies violations, manages logs and regulations

Top Management

Receives critical notifications, reviews reports, uses analytics for process control

[development stages]

/06
1 Information security and communication policy audit
2 Architecture and access model design
3 UX development and template formats
4 MVP: limited version for 3 roles
5 Scaling: full routing, analytics, event journal
[tech stack]
/07
React Native
React Native
React
React
TypeScript
TypeScript
WebSocket
WebSocket
Python
Python
FastAPI
FastAPI
PostgreSQL
PostgreSQL
Redis
Redis
RabbitMQ
RabbitMQ
Docker
Docker

[results]

/08
  • departments where the solution was deployed
    7
  • response time to critical messages
    42 %
  • use of third-party services in communication
    100 %
  • Centralized logs and control events

    Confirmed by post-implementation research