Technology & Security

Built on a modern, security-focused stack.

SendSecure combines a Rust API, React and Vite web application, PostgreSQL persistence, provider-based cryptographic operations, and Railway-oriented deployment architecture.

Engineering choices that support trust.

The platform is designed to keep security-sensitive operations explicit, testable, and separated from ordinary application concerns.

RustAPI services, cryptographic orchestration, evidence processing, and strongly typed domain logic.
React + ViteResponsive browser interface and rich client-side workflow coordination.
PostgreSQLTransactional persistence for identities, messaging, evidence, receipts, and lifecycle records.
RailwayPlanned production hosting for the website, application services, database connectivity, and supporting infrastructure.

Security architecture

Provider-based private-key custody

Signing and decryption operations are delegated through a cryptographic operations layer. On Windows, private keys can remain protected by the operating system’s cryptographic provider.

Hybrid encryption

Message and attachment content is encrypted with symmetric keys, while recipient public keys protect access to those content keys.

Atomic persistence

Critical database operations are structured to avoid partial message and evidence writes when a transaction fails.

Trusted timestamps

RFC 3161 timestamp evidence supports independent verification of when a message or ledger hash existed.

Hash-linked lifecycle records

Evidence events can be chained to help reveal tampering and preserve chronological continuity.

Independent evidence attestation

Evidence-package assembly may be attested by a SendSecure-controlled service without misrepresenting that attestation as a user signature.

SendSecure does not describe itself as “unhackable,” “military-grade,” or automatically compliant with any customer-specific legal framework. Security and compliance depend on deployment, configuration, user behavior, contracts, and the requirements applicable to each organization.