Our Infrastructure

Redoubt's public promise is simple: your organization gets a private, professionally managed messaging environment that is not funded by advertising, tracking, or data mining. This page explains the technical choices behind that promise for customers who want to evaluate the stack directly.

Hosting: Flokinet

All customer instances are hosted through Flokinet, a hosting provider based in Iceland and Finland with a specific focus on privacy-sensitive workloads. Flokinet serves journalists, activists, legal professionals, and organizations for whom confidentiality is non-negotiable. They have a documented track record of resisting abusive legal demands and have been recognized by digital rights organizations for their commitment to customer privacy.

We select hosting locations for their strong data protection laws and independence from major surveillance alliances. Flokinet operates in multiple privacy-respecting jurisdictions, and our choice of location may vary over time as we evaluate cost, reliability, and legal environment. Regardless of specific location, all Flokinet facilities are held to the same privacy-first operational standards.

Flokinet is not affiliated with any intelligence-sharing alliance (including the Five Eyes, Nine Eyes, or Fourteen Eyes). This matters in practice: law enforcement requests must go through formal legal channels, and Flokinet has publicly stated they scrutinize and, where permitted, contest such requests.

Redoubt Systems is a US-based company. Legal requests for customer data would typically be routed through US legal process — and due to end-to-end encryption, we cannot provide access to message content regardless of the source of the request.

Protocol: Matrix / Synapse

Each customer instance runs Synapse, the reference server implementation of the Matrix protocol. Matrix is an open standard for real-time communication with end-to-end encryption built in. The cryptographic implementation — the Olm and Megolm ratchets — is based on the Double Ratchet algorithm, the same approach used by Signal.

Being open-source and open-standard means the protocol and server software have been reviewed by independent security researchers. There is no proprietary black box. If you want to verify the cryptography, the source code is publicly available.

We disable federation on all instances. Your instance communicates only with your own users — there is no cross-tenant data sharing and no connection to the broader Matrix network.

Client: Element Web

Your web-based chat interface is Element Web, the reference client for Matrix, built by Element (formerly New Vector). Element Web is open-source, actively maintained, and the most widely used and audited Matrix client available.

We deploy Element Web with Redoubt branding and a locked configuration: the homeserver is set to your instance and cannot be changed by users. We also disable open registration — only your instance administrator can create accounts. This keeps your environment fully controlled.

Deployment Transparency

Redoubt's deployment scripts and configuration files are open source and available for review at redoubtsystems/redoubt-matrix-deploy. This gives technically inclined customers another way to evaluate how the service is provisioned and maintained.

What This Means in Practice

Questions?

If you have specific questions about our technical setup or security practices, email us at contact@redoubt.systems.