Platform Overview
How Madar serves individuals with private encrypted messaging and organizations with self-hosted governed workspaces.
Two Distinct Operational Modes in One Adaptive Architecture
Madar is built around a strict separation between personal communication and institutional workspace operations. Users install a single client application (the Madar Adaptive Agent), which maintains completely isolated cryptographic and storage vaults for personal use and for each enrolled organization.
In Personal mode, the application connects to the Madar Personal service (hosted at https://madar.xpertsafe.com and https://api.xpertsafe.com). All private conversations use end-to-end encryption (X3DH key agreement with AES-256-GCM payload encryption), and no organization has visibility or control over personal data.
In Workspace mode, an organization deploys its own self-hosted server on its internal infrastructure or private cloud. Employees enroll by scanning a cryptographically signed QR code issued by their IT administrator.
| Dimension | Madar Personal | Madar Workspace (Self-Hosted) |
|---|---|---|
| Hosting Model | Hosted by Xpert Safe (madar.xpertsafe.com) | Self-hosted on organization infrastructure |
| Enrollment | Phone number + OTP verification | Signed QR token (madar://enroll) + corporate credentials / SSO |
| Encryption Model | End-to-end encrypted (X3DH + AES-256-GCM) | Standard governed (AES-256-GCM at rest) or Confidential E2EE channels |
| Core Capabilities | Private chats, Waves, Pulse, Moments, Calls, QR Invites | Verified Broadcasts, Decisions Log, Follow-ups, Action Hub, Directory |
| Administrative Control | None — fully user-controlled | 28-key signed policy engine, DLP watermarks, Selective Wipe, Audit Chain |