ZMath / Zero Boundary Algebra

Encrypt locally. Send the container.

ZShield turns a message, file, or vault note into an authenticated envelope inside your browser. The passphrase, exact pattern image, and plaintext stay on your device. Matrix E2EE protects the room; ZMath Auto adds a separate encrypted payload inside the hosted Element composer and attachment path.

Open ZShield workspace Open CallChat Founding pilot

Hosted automatic lane

The real Element client protects content after one local unlock.

ZMath Auto processes the password and exact image separately, mixes the factors with HKDF, and applies AES-256-GCM before Element sends a message or selected attachment. Legacy ZME1 containers remain readable.

The exact image can be remembered only as an encrypted local device record. The passphrase remains session-only. Recipients need matching factors; Matrix-only sending remains an explicit option.

Current roomsLive status confirms Matrix E2EE across every existing CallChat room.

ZMath AutoThe hosted Element composer and selected attachments are intercepted before send.

Portable fallbackThe standalone workspace remains available for imported envelopes and files.

How Shield is presented to users

01 Select content Unlock once with the passphrase and exact pattern image.

02 Protect locally The hosted client protects composer text and selected attachments before upload.

03 Send or store Element sends only the ZMath envelope or protected .zme1 attachment.

The hosted service uses reviewable standard Web Crypto primitives and a dual-factor ZMath unlock. Licensed deployments add owner-controlled policy and recovery operations. An optional IonQ hardware-linked factor is derived in the owner browser and becomes a required KDF input when that profile is selected. IonQ receives neither the browser nonce nor the final factor.

Hosted

CallChat

Hosted ZMath Auto in Element plus the portable ZME1 workspace.

$0 Start with CallChat

Self-hosted

Founding Pilot

Monthly pilot for one approved server: deployment review, protected-file setup, Q-Call posture, and direct onboarding.

$55/month Buy monthly

Annual

Annual Pilot

The same founding deployment scope on an annual schedule, including review checkpoints as the product matures.

$550/year Buy yearly

Self-hosted

Server License

Use the proprietary Shield layer on one approved CallChat-compatible deployment while premium source stays protected.

Unlimited users Get license

What license buyers get

Working local flow

Users can protect and open files today with a clear authenticated-encryption workflow.

Policy entitlement

Licensed servers can use approved entitlement checks for self-hosted Shield and Q Call access.

Protected source boundary

Licensing grants use of the premium layer, not republication of private ZMath source code.

Clear fallback

Normal Matrix messaging remains usable; Shield files appear as protected containers to clients without Shield tooling.