Information security in Express

We know how important information security is for our customers. All your messages, calls, conferences and files are fully encrypted. eXpress uses various methods and security protocols to ensure the protection of your data.

Multi-layer end-to-end encryption of all data and metadata
Secure on-premise servers for enterprise customers
Support for enhanced qualified electronic signature on demand
Audited cryptographic security

Data protection in eXpress

User authentication

via 3 completely independent channels

SMS OTP

(linked to a phone number)

Personal user password

(inaccessible by system administrators)

Enterprise account

in Active Directory (NTLMv2 end-to-end authentication or one-time password from the corporate email)

Crypto container

Data storage and mobile application management

Encrypted storage of all data on a mobile device

Deletion of all data on a device on command from the server

(or one session if a phone has been lost, or all sessions if an employee has been dismissed)

Opening of files inside the eXpress application container; ban on external transfer and saving

Control of system features

(screenshotting, screen recording, saving in clipboard)

Absolute security of data transfer

Two layers of elliptic-curve end-to-end encryption

Secure push notifications without content transfer

TLS 1.3 and DTLS transport encryption

GOST encryption on demand

File and data access policies can be configured based on preset parameters

Access only via a PC in the enterprise network
Location-based access
Ban on data transfer and saving to an external medium
Conversation feature with a message timer: deletion after a specified period or immediately after reading