ChatMail on Renati OS: hardened mobile communications

ChatMail on Renati is currently offered on select Pixel devices. Please contact us for an updated supported device list.

It starts with a custom hardened kernel: developer debugging options are removed and unneeded services are stripped to create a minimal build that reduces the attack surface. The operating system uses no third-party services. A custom encrypted camera prevents metadata from being stored unencrypted, and a private keyboard prevents information being sent to Google's servers. USB data, Bluetooth, fused location, GPS and near-field communications are all removed.

Devices run the latest Android security patches, and OTA updates are pushed to your device over WiFi. Updates matter because new vulnerabilities are found continuously. Many vulnerabilities target web browsers and JavaScript, which are removed in Renati.

Every Renati phone is assigned a unique user identifier based on a Universally Unique Identifier (UUID) token, generated for each device on first activation. This avoids tying management to an IMEI and helps protect user data.

Only custom secure applications are included. The primary app, ChatMail, encrypts your calls, messages, group chats, photos and notes. Clients install ChatMail during the setup wizard, so their username and password are the only credentials with access to the device. Renati also includes a custom currency converter, calculator and other system functions.

The clipboard can optionally be enabled if you understand the inherent risks of how clipboard data is used (including RAM and chip-off techniques). As an added security measure, the underlying ADB functionality is disabled to prevent ADB screen recording or screen capture.

There is no way to locate the device. You can request a remote wipe and set up a new phone. A wipe transfer is available to safeguard your investment: the data self-destructs and the phone returns to factory settings.

On first start, the phone connects only to the Renati setup wizard. Using a shared token, it sends your username and hashed password to our infrastructure through a load balancer and REST API over standard TLS. We use our own custom certificate rather than any third-party certificate.

No. You create your password and the device authenticates every contact and message; no one else can use your Renati phone.

No. All Google apps, Google Play and Google services have been removed.

Unlike standard Android keyboards, ours prevents metadata being transmitted back to Google, which is why it has no spell-check. Standard keyboards can transmit spelling suggestions, performance metrics and typing history to Google's servers; our keyboard keeps that data on the device.

A locked-down kernel adds a layer of security over standard Android devices. Each kernel is hardened to the hardware at the most secure level practical, reducing exposure to privilege-escalation exploits that target the kernel.

With power management enabled and the display off, users can expect strong standby battery life. Performance varies by device model.

The app does not talk to the internet directly. A server gathers the latest rates and stores them in our database; the app fetches that data through our gateways and microservices, all over the secure socket tunnel.

For technical assistance, please contact the reseller you purchased from, or contact eCom IT directly using the details below.