Work drifts into personal apps
Decisions and documents end up in chats your organisation can’t govern.
LMN8 EnterpriseComing soon
Every device approved. Every change signed.
Private chat, calls and files for your people, run from a console that shows its work and can’t read it.
- Post-quantum, built on NSA CNSA 2.0
- Data in the region you choose
- Kept under your local laws
The problem
Data leaks through everyday work.
Shared files never expire
A file sent once can be forwarded, kept and leaked for years.
Devices and people leave
A lost phone or a departing employee can walk out with your data.
The console
See the console at work.
Five things your admins do most. Click through, or let each one play.
Coming soon
Stop 1 of 5: Approve a device. A new phone waits. Compare a code, approve, and it takes one seat.
Approve a device.
A new phone waits. Compare a code, approve, and it takes one seat.
acme.lmn8.app · console
- Overview
- People
- Devices
- Policies
- Shares
- Audit log
DevicesMeera J. · Super admin
All devices
- Meera J. · MacBook ProCompany-owned
- Arjun K. · iPhone 16Company-owned
- Kavya N. · Galaxy S24BYOD
Seats
47 / 50seats = devices
Bought first. When all are in use, new devices wait.
Approval request
Waiting for Priya to sign in on her new phone…
Audit log
SystemPolicy v11 verified on 47 devices08:40
For your people
What they use every day.
Their own app on macOS, Windows, Linux, Android and iPhone, with the same encryption as LMN8.
EnterpriseComing soon
Teamsacme
Policy v12 · verified on this phone
- DesignKavya: the v3 boards are in Drive2
- SalesRohan: call with partner.example at 4
- LegalAsha shared a view-only contract1
- All AcmeMeera: policy v12 is live
ChatsTeamsCallsDriveYou
Chat
Team and direct chats, with a directory that fills itself.
Calls
Voice, video and screen share, with a code to compare.
Drive
One encrypted Cloud, folders per team, a built-in editor.
Share outside
To other organisations, with approval, expiry and limits.
Your region
Files stored in the regions your contract names.
SOS for staff
Off until you opt in; then it alerts your responders.
Chat and calls live in the apps; the web is for the console and Drive.
Privacy and control
Privacy for staff. Control for the company.
Your admins can
- Approve, suspend and remove people and devices.
- Set policies and publish them, signed, to every device.
- Erase company devices, and only your data on personal ones.
- Restore a member’s keys, when the people you name agree.
- Export chats for audit, if their role allows it.
Your admins can’t
- Read chats while that switch is off. It starts off.
- Turn chat reading on quietly. Everyone is told.
- Touch a person’s own files on their own phone.
- See where a BYOD device is, or see personal LMN8.
- Remove a super admin alone, or hide a change from the log.
And LMN8 can’t read it
Keys are made on your devices. Our servers hold encrypted data they can’t open, and we hold no content keys.
Security
Security your team can verify.
Built on NSA CNSA 2.0 algorithms. Admin control sits on top and never weakens it.
Post-quantum
Encryption designed to hold up against future quantum computers.
Checked by devices
Every device checks policies and approvals before acting.
Changes show
A changed log entry breaks the chain.
Go deeper
The detail, in plain words.
For your security team: algorithms, protocols, and what is still classical.
ML-KEM-1024 for keys, ML-DSA-87 for signatures, AES-256-GCM and SHA-384, from NSA’s CNSA 2.0 suite, in every feature. CNSA 2.0 is the algorithm standard we follow, not a certificate.
A new device gets your organisation’s keys only after an admin approves it. Admin and member compare a code, and the approval is signed.
Each policy version is signed with your organisation’s key. Devices check the signature and the version before they follow it, so an old or forged policy is refused.
Append-only, each entry chained to the one before, with signed checkpoints. Exports are signed too, so your SIEM receives what was logged.
An organisation key above each member’s keys lets you restore a member who lost every device. Its control is split between people you name.
Connections mix a post-quantum key exchange with a classical one, public web certificates are classical, and calls ride WebRTC’s classical transport under a post-quantum layer. Your content is encrypted separately inside them.
Planned: SOC 2, ISO 27001 and a FIPS 140-3 lab certificate for our encryption module. None is held yet; the trust centre shows where each stands.
Compliance and residency
Told honestly.
Designed in
- DPDP grievance mailbox and public request form
- Erasure with signed certificates
- Tamper-evident audit log with SIEM export
- Retention, legal hold and export by policy
- Data region by contract
Still being detailed
- Deadline tracking and statutory reports
- Regimes beyond DPDP such as GDPR
- MDM integration: Intune, Jamf, Google
- SAML single sign-on; OIDC and SCIM are built
What we don’t claim
- Using LMN8 does not make you compliant; it gives you the tools.
- Planned: SOC 2, ISO 27001 and a FIPS 140-3 lab certificate for our encryption module. None is held yet.
- Account metadata is processed in India (Mumbai); EU and Swiss metadata regions come later.
ResidencyBY CONTRACT
Pick where your files live: one region, or several.
- Asia-Pacific
- Western North America
- Eastern North America
- Australia and New Zealand
- European Union
- Switzerland
Your own storage or keys: case by case.
IndiaComing soon
Most DPDP obligations start on 13 May 2027. LMN8 Enterprise is built to them: grievance handling, erasure with proof, records for audits.
Trust centreRollout
Set up with you. Run by you.
We create your organisation with you, in the region you choose, then hand you the keys.
Support from the people who built it. Questions go to support@lmn8.app.
Talk to us
Seats, storage, regions and price, agreed with you.
We create your organisation
With your limits and your first super-admin account.
Set your policies
A setup wizard walks through each one, with defaults.
Add people and devices
By email, invite, CSV or SCIM; company-owned or BYOD.
Go live
People install the app. Your admins approve each device.
Pricing
Priced per device.
We agree seats, storage and regions with each organisation.
- One seat is one device. A laptop and a phone are two seats.
- The web console and the CLI use no seat.
- An approved outside contact uses one seat.
- Seats are bought before use. No overage, ever.
- Billed monthly or annually. One Cloud storage pool for the whole organisation.
- When a contract ends: notices from 7 days before, then 7 days read-only to export everything.
Early access opens at launch. Write to us and we’ll send a price in writing.
Early accessComing soon
LMN8 Enterprise is coming soon.
We’re opening it to a first group of organisations. Write to us and a person replies, usually within two business days.
Tell us
- Your organisation’s name and size
- How many devices you’d start with
- What matters most: BYOD, compliance, data residency…
Email for early accesssupport@lmn8.app
Smaller teams
A firm, a clinic, one department.
Teams run LMN8 Enterprise too, on a contract sized to the team, with the same approval, Drive and policies.
Just you? See the plans for individuals →Not yet. LMN8 Enterprise is coming soon, with its own server and apps. Write to us for early access.
Not by default. Reading chats is one organisation-wide switch that starts off. If it is ever turned on, everyone is told, and every read is logged.
Work data stays in your organisation’s Cloud, never on the phone. No downloads, copying out or screenshots. A wipe removes only your data.
Admins with the permission can restore their access. Control of that is split between people you name, so no one person holds it.
It gives you the tools: retention, legal hold, export, an audit log and DPDP request handling. Whether you meet a law is a question for your organisation.
Sign-in works with your SSO (OIDC) and people sync from Google or Microsoft through SCIM. SAML and MDM integration (Intune, Jamf, Google) are still being decided.
Notices start 7 days before. Then your organisation is read-only for 7 days so you can export everything, and the data is deleted 2 days later.
See your organisation in the console.
LMN8 Enterprise is coming soon. Tell us how you work and get early access.