End-to-End-Encrypted Team Communication & Collaboration Tools

This post is a collection of my notes about my search for secure collaboration and communication tools for smaller organizations, specifically vast limits. I will update it from time to time.

Bird’s nest in a stationery sign by Milan B under CC

What is This About?

In an ideal world, all our data and communications would be stored and transmitted end-to-end encrypted, i.e., in such a way that (cloud service) providers never see unencrypted data. Realistically, end-to-end encryption is only available for a subset of the services we use and need.

Requirements

Which features are we looking for? What functionality do we need?

  • End-to-end encryption with keys managed by the customer
  • UX: user experience and stability
  • SaaS: application hosted and managed by the vendor

Text & Audio/Video Chat

Mattermost

Netsfere

  • Company website
  • Cloud-based enterprise messaging service
  • The free plan looks good already. The paid Enterprise plan adds AD synchronization via an agent to be installed on domain controllers.

Element (Formerly Riot)

  • Company website
  • Free and open-source software built on the Matrix backed by a well-funded organization
  • Available for self-hosting or as SaaS
  • Mobile app: good reviews on Google Play and the App Store
  • Audio/video calls use WebRTC which is not end-to-end encrypted.
  • Lack of admin controls.

Stackfield

  • Company website
  • Text chat and team collaboration as SaaS or on-premises solution
  • Functionality includes task management, time tracking, and event scheduling
  • Currently 1:1 calls only, no group calls with audio/video

Wickr

  • Company website
  • Zero-trust communications as SaaS (Wickr Pro) or on-premises solution (Wickr Enterprise)
  • Supports SSO via OpenID Connect (requires Wickr Pro Gold plan; Google and Okta specifically listed as compatible; configuration is not documented)

Wire

  • Company website
  • Fast-growing startup focusing on secure communications for enterprises
  • Usability of the encryption and security features seems to be good
  • Mobile app: the reviews on the Play Store and the App Store are not great

File Storage, Sharing and Sync

  • Company website
  • Presents cloud storage to the OS as a virtual drive
  • Adds a logical layer, works with most cloud storage providers (including Amazon, Azure, Google, Backblaze)
  • Lack of admin controls
  • The Windows client’s UX is so-so

pCloud Business

  • Company website
  • Swiss-based cloud storage that offers end-to-end-encrypted and non-encrypted folders in the same account
  • The feature set seems to be mature
  • No ACLs with encrypted folders, but team members can be invited with different permission levels (source): view, edit, manage rights

Sync.com for Business

  • Company website
  • End-to-end encrypted file storage and sharing for teams
  • Inexpensive, good feature set
  • Supports ACLs through team shared folders (no nesting or changed permissions on subfolders)
  • Only one sync folder (directories outside the sync folder can be synced by creating symbolic links; this is not officially supported, though)
  • Not everybody seems to be happy with the Android app

Tresorit

  • Company website
  • End-to-end encrypted alternative to the usual EFSS suspects
  • Good UX, reliability and sync speed (personal experience over several years)
  • What’s missing: ACLs (permissions) per folder
ChatCollaborationConferencingEFSSEncryptionFile Server

Comments

Related Posts

Standard Notes: a Note-Taking App with Client-Side Encryption

Standard Notes: a Note-Taking App with Client-Side Encryption
Note-taking is one of those topics that appear to have been solved long ago, yet offer plenty of opportunity for new contestants. There are multiple reasons for that, but for me the number one is encryption. The major players, Microsoft OneNote, Evernote, and Google Keep, store your thoughts and ideas in plain text on any synchronized device as well as their cloud servers. In the age of hacks, leaks, and exploits it does not take much to conjure up scenarios where those thoughts become public knowledge all of a sudden.
Applications

Fixing VS Code UI Unresponsiveness Caused by GitHub Copilot Extension

Fixing VS Code UI Unresponsiveness Caused by GitHub Copilot Extension
This article shows a simple solution to a problem that doesn’t seem to be adequately documented: VS Code UI lags, freezes, and delays caused by the GitHub Copilot extension. Problem: VS Code UI Becoming Slow Having worked on a Python project for a while, I noticed that VS Code’s UI was frequently freezing for seconds at a time. This was happening in various places of the UI: the editor itself but also in the GitHub Copilot Chat window. Copilot also seemed to be taking more and more time getting ready to answer, and the extension-host process would fully saturate one CPU core for long periods of time.
Applications

Latest Posts

Filebrowser to Be Archived. Migrate to a Modern Alternative: Sambee

Filebrowser to Be Archived. Migrate to a Modern Alternative: Sambee
Filebrowser is being archived. As the author writes, the codebase dates back to when he was but 15 years old. Having created such a popular file management tool is a more than impressive achievement for anyone, let alone a teenager. However, when it comes to security and reliability, Filebrowser seems to be built on a less than ideal foundation, so much so that the author states:
Home Automation, Networking & Self-Hosting