QuantorPhone iOS
QuantorPhone QUANTORPHONE Buy license
System status · Secure channel

When interception is not an option

QuantorPhone is a post-quantum encrypted communications platform for iPhone — voice, video, messaging and files, end-to-end, on infrastructure you own. No cloud. No backup. Nothing to seize.

Post-quantum E2E Zero cloud Self-hosted Remote crypto-erase
QuantorPhone
ML-KEM-1024Post-quantum key exchange
AES-256GCM encrypted on-device vault
0 bytesStored in any cloud
Secure EnclaveHardware-sealed access keys
01Capabilities

Every channel, hardened end to end

Talk, message, meet and move files with the same guarantee: encrypted on your device, encrypted in transit, and unreadable to anyone who intercepts the line or seizes the handset.

Post-quantum E2E

Hybrid ML-KEM-1024 + X448 key agreement protects every message, call and file against capture-now-decrypt-later attacks.

Encrypted voice & video

Post-quantum encrypted calls with AES-256 media. Keys are negotiated on the endpoints — the server never sees them.

Disappearing messages

Set an ephemeral timer per conversation. Messages self-destruct on both devices once read — no residue left behind.

On-device encrypted vault

An AES-256-GCM virtual filesystem holds all content. The key is random, device-sealed in the Keychain, and never exported.

Secure-Enclave PIN & duress

A 6-digit PIN on a shuffled keypad, bound to the Secure Enclave. A separate duress PIN unlocks a decoy — never the real data.

Remote crypto-erase

One command destroys the device remotely — even while the screen is locked. You define the secret trigger word yourself.

Screen defense

Blank preview in the app switcher, blocked screenshots and recording, and a low-emission mode that minimizes what the display reveals.

No cloud, no backup

No iCloud, no sync, no telemetry. The app's data container is excluded from device backups — it exists in exactly one place.

Sovereign infrastructure

Self-hosted servers, mutual-TLS client certificates and your own root of trust. No dependency on QuantorPhone-operated systems.

Verified identity

Per-contact key fingerprints and trust verification confirm you are talking to the right endpoint — not an impostor on the wire.

Groups & secure meetings

One-to-one, group chat and end-to-end encrypted conferences with encrypted file transfer — the whole team on one hardened channel.

19 languages, dark by default

A field-ready interface localized into 19 languages, with a dark theme set as the default for low-visibility use.

02Threat model

Built for the adversary you can't see yet

Consumer "secure" messengers defend against today's interception. QuantorPhone is engineered for a harvest-now-decrypt-later world and for devices that fall into the wrong hands.

ControlQuantorPhoneConsumer secure messengers
EncryptionPost-quantum hybrid — ML-KEM-1024 + X448Classical elliptic-curve only
InfrastructureSelf-hosted, under your controlVendor-operated cloud
Data at restEncrypted vault, keys sealed to the deviceStandard app sandbox
Cloud backup—None; excluded from backupiCloud / Google on by default
Compromised deviceRemote crypto-erase, works while lockedLimited or none
CoercionDuress PIN opens a decoyNone
IdentitymTLS certificates + key fingerprintsPhone number
03Interface

Clear under pressure

A calm, dark, field-ready interface — the complexity is in the cryptography, not on the screen.

QuantorPhone PIN unlock screen
App lock · PIN
Encrypted conversations list
Encrypted conversations
Encrypted calls screen
Encrypted calls
Secure meetings screen
Secure meetings
Security settings screen
Security settings
Hostility management — remote wipe command
Remote wipe command
04Technical specification

The detail, on the record

No "military-grade" hand-waving. Here is exactly what runs under the hood.

Messaging encryption
End-to-end hybrid ML-KEM-1024 + X448 key agreement
Call encryption
Post-quantum key agreement · SRTP AES-256
Data at rest
Encrypted virtual filesystem · AES-256-GCM (AES256GCM128_SHA256)
Vault key
32-byte random · iOS Keychain · AfterFirstUnlock, this-device-only, non-synchronizable
App access
6-digit PIN · Secure Enclave P-256 ECDH + HMAC · shuffled keypad · duress code
Transport & identity
secp521r1 · mutual-TLS client certificates · CRL revocation
Infrastructure
Self-hosted · customer-controlled root certificate authority
Cloud & backup
None · no iCloud/CloudKit entitlements; data container excluded from backup
Standards
ML-KEM-1024 (NIST FIPS 203, NSA CNSA 2.0 suite) · AES-256 (FIPS 197)
Platform
iOS · iPhone · 19 languages · dark theme default
05Independent assessment

Tested against forensic extraction

The real test of a secure phone is what an investigator can pull off it after seizure. QuantorPhone is assessed against GrayKey — the forensic platform used to extract data from locked iPhones.

GrayKey extraction test Prepared by Luca Cadonici · report in preparation

The full report — methodology, device state and exactly what could and could not be recovered under forensic extraction — is prepared by Luca Cadonici (Secure Path) and will be published here on completion.

Report · coming soon
06Sovereignty

Your network. Your keys. Your rules.

QuantorPhone runs on infrastructure you operate — on-premises or in a sovereign cloud. There is no vendor server in the path that could be subpoenaed, mirrored or switched off.

Every device authenticates with a client certificate issued by your own certificate authority, and revocation is yours to enforce.

  • No dependency on QuantorPhone-operated servers
  • Issue, trust and revoke every endpoint yourself
  • Metadata stays inside your perimeter
// deployment profile # transport
auth = secp521r1 · mTLS
root_ca = customer-owned
revocation = CRL

# keys
kem = ML-KEM-1024 + X448
at_rest = AES-256-GCM
vault_key = keychain · device-only

# exfiltration surface
cloud = none
backup = excluded
telemetry = none
Option A

Self-managed

You run the full QuantorPhone server stack on your own infrastructure — on-premises or in a sovereign cloud. We provide the software and the hardening guide; you hold every key.

Option B

On-premise, deployed by us

Prefer a turnkey installation? Secure Path provisions and deploys the complete server stack on your premises and hands you a running, fully isolated system. You keep exclusive control — nothing leaves your perimeter. Contact us for deployment details.

Licensing

One license. Everything hardened.

QuantorPhone is licensed to vetted government, defense and critical-infrastructure organizations. Every capability on this page is included — no tiers, no add-ons.

€75 / month €900 / year · 12 × €75, billed annually 360-day license
  • Post-quantum end-to-end encryption
  • Encrypted on-device vault & remote crypto-erase
  • Secure-Enclave PIN, duress code & screen defense
  • Groups, encrypted meetings & file transfer
  • 19 languages · updates included
To activate a license ac@securepath.biz
Want to evaluate first? Write to us for a demo license and run your own tests before you commit.