Your company gets its own isolated Teletype, in the region you choose. Files and backups are encrypted, people sign in your way, apps get only the rights you approve, and every admin action lands in a log nobody can quietly rewrite.
Nothing shared with other companies. Each company runs its own Teletype, at its own address and in the region you choose.
Your workspace runs as an instance of its own, with its own database, files and backups. No other company's data is in it.
Each company has its own memory and processor limits, so another company's load, failure, update or restore never reaches yours.
You pick where your data is stored when you create the workspace. Messages, files and call recordings are kept on servers in that region.
Your workspace opens at your-company.teletype.cloud, always over HTTPS.
Between the apps and our servers, data travels only over encrypted connections, calls included. Between our servers, over encrypted tunnels or a private network.
Only the staff who need it for their work can reach the servers.
Encrypted at rest, checked before it's stored. Files and backups are encrypted under your company's own key; every backup is verified, rotated and never kept forever.
Every file you upload, along with its previews and video versions, is stored encrypted with AES-256 under your company's own key.
A file reaches a browser or an app only through your workspace, once it checks that the person may see it.
A consistent copy of your workspace's data every hour, taken while everyone keeps working.
Each copy passes an integrity check before it's uploaded. A damaged one never becomes a backup.
Backups are encrypted on the server before upload and kept apart from it. Without a key, no backup is uploaded at all.
24 hourly, 7 daily, 4 weekly and 3 monthly copies, in a ring. What you delete leaves the backups within about three months.
A restore checks the copy, decrypts it and verifies the data before it takes over. The current data is set aside, never deleted.
Sign in the way your company already does. A code by email, one Teletype account for every workspace, or your own identity provider — and only it, if you say so.
A one-time six-digit code or a link. The code is random, dies after five tries, and a new letter cancels the one before.
One account at app.teletype.cloud opens all your workspaces, and each workspace verifies the sign-in itself.
Connect your OpenID Connect provider. Its client secret is stored encrypted.
Make your provider the only way in. The owner keeps an emergency sign-in, so a broken provider can't lock the company out.
Sign-in through your provider opens in the browser or the system's own sign-in window, so its passkeys work on the web, Mac, iPhone and Android.
Your directory adds and removes people. Someone switched off there can't renew a session here.
Groups in your provider map to admin, member or guest. An owner is never granted or demoted from outside.
Colleagues with your company's email domain join through Teletype without an invitation. Everyone else needs one.
You decide who sees what. Roles in every workspace, guests with an end date, private channels and pages opened by request.
Owner, admin, member and guest, in every workspace. Only the owner sets up single sign-on.
Give a guest one channel or several, without a full seat and with an optional end date. Revoke it in one click.
Someone who can't open a page asks for access; whoever can share it grants view or edit, or declines.
Only its members see and find a private channel. Everyone else gets in only by invitation.
Apps get only the rights you approve. Claude, ChatGPT, Cursor and other apps work in Teletype on a member's behalf — within that member's rights and the limits an admin sets.
An app asks on a consent screen that lists exactly what it will be able to do. Reading direct messages is a right of its own.
An app acts as you and only within your own rights; it can never make anyone an admin. Its messages are marked as sent through the app.
Admins cap what apps may do in the workspace, even with a member's consent. Lowering the cap narrows live connections at once.
A blocked app or domain loses every connection at once, and new ones are refused. Third-party apps can be switched off entirely.
When someone is switched off, leaves the workspace or becomes a guest, every app they connected loses access.
Each connection, refresh and revocation goes into the audit log, and an admin can revoke all of a member's connections at once.
A record nobody can quietly rewrite. Choose how long messages live, and see every admin action in a tamper-evident log.
Admins choose how many days messages and attachments are kept, for the whole workspace or a single channel, or keep them forever.
A view-once message is erased from the workspace once everyone has seen it: wiped, not just hidden.
Every admin action is recorded, and each entry is chained to the one before it, so an edited entry breaks the chain.
Each entry names who acted, what they did, to what and when. Secrets never go into the log.
Found a vulnerability? Tell us privately, with the steps to reproduce it.
support@teletype.cloud