rendall, your secure messenger!rendall is an ambitious project, backed by a growing international...
TRANSCRIPT
Rendall,Your Secure Messenger!
Rendall AG, Switzerland
Rendall – Reliable & Secure Communication
Lawyers and attorneys can securely communicate within their law firm and with their clients, including: legal assistance in case of an emergency, remote services with tracking of billable hours and the exchange of sensitive documents.
Management and key employees of any business (especially treasury, legal and accounting departments) are provided with secure instant communication, file transfers and the encrypted storage of confidential files.
Financial services (e.g. private banking, investment consultants, cryptocurrency exchanges) are supported by protecting transaction confidentiality, internal communications and the verification of customer orders.
How Rendall Protects
Full Control Privacy
Public Messengers Rendall Public Messengers Rendall
When data passes a 3rd party or a public server, you don’t control its security, integrity nor its reliability.You have no assurance that your data isn‘t decrypted, copied or pas-sed to 3rd parties.Public messengers can be blocked by governing bodies.
You can choose to run Rendall on your company’s servers or on a dedicated server maintained by our team.You control the physical equipment, its software, security level and reliability.It is almost impossible to block particular servers that run an intra-company messenger.
3rd party servers Most public messengers are not anonymous. 3rd parties can iden-tify one by either phone number or other personal data. Spoofed phone numbers are a security risk.
Rendall is anonymous. You don’t enter your telephone number or postal address. A user can change their nickname at their own discretion.
Anonymity
You don’t take part in granting or revoking access to the messenger. You don‘t control the counterparties and may be exposed to malicious users.You may get your access revoked at any time at the public messenger vendor’s discretion.
You determine the user base, create or block users. Your administrator can set access policies using the mobile or desktop versions of Rendall.
Access policies Some messengers imply personal data use for ad targeting.Personal data is technically easily stolen and lawsuits against these cases are not enforceable.
Rendall stores no personal data.The Swiss jurisdiction of Rendall AG is an additional safety guard for per-sonal and corporate data protection.
Personal data storage
Legislative changes may affect public messengers. This includes centralized restrictions, limits to cryptography and anonymity as well as other security issues.
Rendall is a corporate messenger. The regulation of public messengers is not applicable to internal corporate messengers.
Governmental interference
Policies that govern metadata are either regulatory-compliant or non-transparent. As a result, a user can be identified and tracked (inclu-ding geographical location).
Rendall doesn’t store IP addresses or user metadata.
Metadata and IP addresses
Facebook banned scientist Allison Hagood in 2016. Her fact based publications on anti- vaccination hit the lobby of non-scientific trolls. (Professor Allison Hagood is a public advocate for science and public health, particularly vaccination)
Telegram is formally banned in Russia according to a court ruling.
Some messengers (e.g. WhatsApp, Telegram) are blocked in China.
http://www.skepticalraptor.com/skepticalraptorblog.php/antivaccine-activists-attack-allison-hagood-using-facebook/
2
Full Control Privacy
Public Messengers Rendall Public Messengers Rendall
When data passes a 3rd party or a public server, you don’t control its security, integrity nor its reliability.You have no assurance that your data isn‘t decrypted, copied or pas-sed to 3rd parties.Public messengers can be blocked by governing bodies.
You can choose to run Rendall on your company’s servers or on a dedicated server maintained by our team.You control the physical equipment, its software, security level and reliability.It is almost impossible to block particular servers that run an intra-company messenger.
3rd party servers Most public messengers are not anonymous. 3rd parties can iden-tify one by either phone number or other personal data. Spoofed phone numbers are a security risk.
Rendall is anonymous. You don’t enter your telephone number or postal address. A user can change their nickname at their own discretion.
Anonymity
You don’t take part in granting or revoking access to the messenger. You don‘t control the counterparties and may be exposed to malicious users.You may get your access revoked at any time at the public messenger vendor’s discretion.
You determine the user base, create or block users. Your administrator can set access policies using the mobile or desktop versions of Rendall.
Access policies Some messengers imply personal data use for ad targeting.Personal data is technically easily stolen and lawsuits against these cases are not enforceable.
Rendall stores no personal data.The Swiss jurisdiction of Rendall AG is an additional safety guard for per-sonal and corporate data protection.
Personal data storage
Legislative changes may affect public messengers. This includes centralized restrictions, limits to cryptography and anonymity as well as other security issues.
Rendall is a corporate messenger. The regulation of public messengers is not applicable to internal corporate messengers.
Governmental interference
Policies that govern metadata are either regulatory-compliant or non-transparent. As a result, a user can be identified and tracked (inclu-ding geographical location).
Rendall doesn’t store IP addresses or user metadata.
Metadata and IP addresses
WhatsApp shares user data with Facebook.
https://medium.com/@gzanon/no-end-to-end-encryption-does-not-prevent-facebook-from-accessing-whats-app-chats-d7c6508731b2 d7c6508731b2
In 2005 Eric Schmidt (CEO of Google at the time) had Google boycott CNET after CNET published personal data about Eric Schmidt found through Google search.
https://money.cnn.com/2005/08/05/technology/google_cnet/
3
Loss / Theft / Human Error, Data Storage and Encryption
Public Messengers Rendall
Public messengers predominantly store data at device level. If a device is accessed by a regulatory body representative (e.g. police) or even a thief, data is lost and potentially revealed to 3rd parties.
Rendall does not store any data on devices. Neither messages, nor con-tacts, nor files.If a 3rd party gets access to your device it does not lead to data leakage or loss
Storing messages on the device
Public messengers store files that are sent or received even upon deleting them (in “trash” folders). Thus confidential files could be accessed by 3rd parties.
By default Rendall doesn’t save files on devices. It also clears device memory upon exit.
File storage and cached data
Encryption keys and algorithms are controlled by the messenger and its owner, not the customer. The customer can not ensure the integrity of the encryption.Not having an application password makes encryption pointless.
True end-to-end security for messages, voice calls and file transfers. Rendall uses top financial industry cryptography algorithms.Customers control and ensure encryption at all levels–client device, network and server. Customers control the access to the servers that run Rendall.
Encryption
October 2018. The case of billionaire Rybolovlev, Monaco FC owner, under formal investigation. The compromising material is found in the text messages on his lawyer’s phone.
https://www.bbc.com/news/world-europe-46137114
May 2018. A flaw in the Signal desktop app lets hackers steal chat logs in plaintext. It allows remote attackers to inject malicious code on the recipients‘ Signal desktop app just by sending them a message—without requi-ring any user interaction.
https://thehackernews.com/2018/05/signal-desktop-hacking.html
4
Loss / Theft / Human Error, Data Storage and Encryption
Public Messengers Rendall
Public messengers predominantly store data at device level. If a device is accessed by a regulatory body representative (e.g. police) or even a thief, data is lost and potentially revealed to 3rd parties.
Rendall does not store any data on devices. Neither messages, nor con-tacts, nor files.If a 3rd party gets access to your device it does not lead to data leakage or loss
Storing messages on the device
Public messengers store files that are sent or received even upon deleting them (in “trash” folders). Thus confidential files could be accessed by 3rd parties.
By default Rendall doesn’t save files on devices. It also clears device memory upon exit.
File storage and cached data
Encryption keys and algorithms are controlled by the messenger and its owner, not the customer. The customer can not ensure the integrity of the encryption.Not having an application password makes encryption pointless.
True end-to-end security for messages, voice calls and file transfers. Rendall uses top financial industry cryptography algorithms.Customers control and ensure encryption at all levels–client device, network and server. Customers control the access to the servers that run Rendall.
Encryption
Product FeaturesProduct Type Business Enterprise On Premise
Server location Hosted by Rendall AGin Germany or Switzerland
Self-hosted
Number of users 50 unlimited unlimited
Features
Instant text messaging
Voice call
File sharing
Group chats and conference calls
Security policies for users: Invitation, authorization, creating contact groups.
Configured on admin‘s mobile devices.
File manager
Personal encrypted storage 5 GB 10 GB
Mobile versions (iOS, Android)
Desktop versions (Windows, MacOS, Linux)
Technical support
Protection Factors
End-to-end encryption of messages and voice calls (at server, network and device level)
Multifactor authentication
Auto-hibernation after timeout (1 minute by default)
Password (or fingerprint) request on each login
Erasing data on exit
Extra Services
Remote cybersecurity consultations 4 hours
Special offer for legal professionals 2 months for free
5
Threats and ProtectionThreats Rendall Protection
Data loss
Cyber attacks
Seizing of equipment (law enforcement interventi-on at the data center)
ServerTop-tier EU data center or a server of your choice and daily backups
Real-time monitoring for hazards, true end-to-end encryption
Safe server location (Germany or your servers)
Interception of data Communication channels
VPN, SSL
End-to-end encryption
Device is stolen, lost or confiscated (most common threat)
Client devices(mobile / desktop)
Password protection
No storage of messages and files at device level (cache is cleared at exit)
End-to-end encryption
User identification (e.g. by phone number)
Social engineering
Disloyal users
Process design Anonymity
Controlled list of users
Mandatory admin + P2P authorization (to be able to send a message)
Centralized session control
Self-destructing messages
6
Sergey Klevogin is ranked a top 17 expert in the field of cybersecurity out of 200,000 global members of the EC-Council, the world’s largest organization for cybersecurity technical certi-fication with operations in 145 countries, owner of the acclaimed Licensed Penetration Tes-ter Master (LTM), Certified Ethical Hacker (CEH), Certified Security Analyst (ECSA), Computer Hacking Forensic Investigator(CHFI) and Certified Chief Information Security Officer (CCISO).He consults commercial airlines, state universities and banking associations on cybersecu-rity. Sergey Klevogin is an outstanding certified instructor on cybersecurity, a member of the circle of excellence among EC-Council instructors.
Alexander Dmitriev (founder) is a Certified Ethical Hacker, Certified Network Defender (CND) and an expert in the field of secured cloud computation, with more than 20 years of experience in the IT industry.
Alexey Voronin (founder) Ph.D. in theoretical physics, is a researcher at CERN, owner of cybersecurity business Electronic Cloud Company with international clients amongst private airlines, financial and consulting companies, legaltech companies, universities and internati-onal research centers.
Rendall is an ambitious project, backed by a growing international team of professional developers for mobile and server applications as well as specialists in cybersecurity.
Rendall‘s Team: A CERN Scientist,Top Ethical Hackers and Developers
Rendall messenger is part of Rendall AG, registered in Switzerland, one of the most reliable jurisdictions for data protection.
Rendall was launched by an international development team in cooperation with the world‘s leading information security experts of the EC-Council.
Top rank Certified Ethical Hackers conduct continuous security testing of the messenger. They analyze threats that arise among the subscriber base on a daily basis, such as: Loss and theft of user devices, actions from disloyal (ex-)employees and attacks from external and internal violators.
7
By Mid-2019 Rendall Will Have Unprecedented Solutions:Encrypted Email, Secure Storage and Payments
12.2018 – 03.2019
Conference calls, video calls
Encrypted conference calls for both desktop and mobile applications
Encrypted personal and group video chats
12.2018 – 03.2019
Personal File Secure Storage
Browser-based file manager
Local file manager (all major operating systems)
Secure file sharing—storage and exchange of corporate data and personal data (often used for credit card numbers and medical information)
02.2019 – 05.2019
Corporate Email
End-to-end encryption of email contents (by default), including client-side, network and server
Centralized management of policies & security settings
All emails are automatically secured with end-to-end encryption. This means no one can decrypt and read your emails. As a result, your encrypted emails can not be shared with third parties.
05.2019 – 10.2019
Payment Platform
Internal corporate settlements
Payment for goods and services between Rendall users
8
Rendall AG, [email protected]://rendall.im