Your office, kept private.

Your team’s conversations belong to your team. Here is how we protect them, and what we’re still building.

Encrypted everywhere

Everything you send travels over TLS. Calls are encrypted with DTLS-SRTP. Messages and files are encrypted at rest.

Private by design

Only people near you or in the same room can hear you. Rooms can be locked, and guests only see what you invite them to.

Never trained on your data

Your messages, files and meetings are never used to train AI models. Every AI answer cites its sources.

Clear indicators

Everyone in a call can see when it’s being recorded or transcribed.

Admin controls

Owners and admins manage members, roles, guests, invites and who can join by email domain.

Built on Cloudflare

Instant runs on Cloudflare’s global network, close to your team, with DDoS protection built in. Calls run on LiveKit.

For IT

Built for companies of 1,000.

Control	Status
Roles: owner, admin, member, guest	At launch
Invite links, approval and domain auto-join	At launch
Passkeys and Google, Microsoft and Apple sign-in	At launch
SSO with SAML and OIDC, and SCIM	Business plan
Audit log, retention policies, legal hold and export	Business plan
Per-workspace AI controls	At launch
EU data residency	Enterprise plan
SOC 2 Type II	Planned after launch

Report a vulnerability

If you find a security issue in Instant, email support@instant.im with “Security report” in the subject. Please give us a reasonable time to fix it before sharing it. We don’t take legal action against good-faith research. Our security.txt has the details.

Your data

Read what we collect and why in our privacy summary. To export or delete your data, email support@instant.im.

Questions from your IT team?

Join the waitlist, or email support@instant.im and we’ll answer them.