> ## Documentation Index
> Fetch the complete documentation index at: https://docs.enigm.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Welcome to Enigm documentation

> Public technical overview of Enigm private product architecture and trust.

Enigm is built for users and organizations that need private communications, controlled Device Trust, reduced identity exposure, and security governance that can withstand technical review.

This documentation is the public technical record of that architecture. It explains how Enigm structures product security, privacy, device trust, encrypted communication, dedicated private environments, connectivity services, emergency workflows, intelligence capabilities, and governance controls across the Enigm ecosystem.

The goal is to make Enigm understandable to enterprise customers, auditors, engineers, partners, and security reviewers. The content is intentionally precise: it describes what Enigm protects, where trust boundaries exist, what administrators can and cannot do, and where the documented limitations are.

<div className="enigm-doc-image-frame enigm-hero-banner">
  <img className="enigm-doc-image enigm-hero-banner-image" src="https://mintcdn.com/enigm/IAACdxJ5vWpxjhY6/assets/images/banner-enigm.jpg?fit=max&auto=format&n=IAACdxJ5vWpxjhY6&q=85&s=aadc77d13010700969f0d515b0cea0a8" alt="Enigm private communications banner" width="1600" height="900" data-path="assets/images/banner-enigm.jpg" />
</div>

## Products

The Enigm ecosystem is organized around six primary products plus Enigm Link, a secure USB environment governed through Enigm Command. Each product has a defined security role, a clear trust boundary, and a documented relationship with the rest of the platform:

<div className="enigm-card-grid">
  <CardGroup cols={2}>
    <Card title="Enigm" href="/app/overview">
      Private messaging, secure calls, Active Defense, trusted devices, multi-device workflows, Enigm Proxy, and VPN Service usage.
    </Card>

    <Card title="Enigm Command" href="/command/overview">
      Web control panel for account, session, device, product lifecycle, Enigm Server, and managed security workflows.
    </Card>

    <Card title="Enigm Link" href="/link/overview">
      Official USB secure environment governed by Enigm Command for desktop apps, Boot OS, VPN validation, and controlled updates.
    </Card>

    <Card title="Enigm Server" href="/server/overview">
      Dedicated private messaging environment with approved users, join requests, and encrypted server content lifecycle control.
    </Card>

    <Card title="Enigm OS" href="/os/overview">
      Secure operating system for Device Trust, platform hardening, controlled device experience, and secure update governance.
    </Card>

    <Card title="Enigm Key" href="/key/overview">
      Emergency key device for user-controlled SOS alerting, selected emergency contacts, and event-bound location sharing.
    </Card>

    <Card title="Enigm eSIM" href="/esim/overview">
      Data-only mobile connectivity across supported coverage areas with identity-minimizing lifecycle management through Enigm.
    </Card>
  </CardGroup>
</div>

## Privacy-first architecture

Privacy is the starting point for Enigm architecture. Security controls exist to support that privacy objective: content confidentiality, data minimization, identity minimization, metadata reduction, user control, and protected device access.

Across the documentation, Enigm uses privacy-oriented and identity-minimizing language carefully. The platform is described as designed to reduce exposure, lower metadata visibility, and minimize unnecessary collection or retention. It is not described with absolute privacy or traceability claims.

Administrative systems are not intended to provide plaintext access to messages, calls, media, attachments, or user conversations.

For enterprise and auditor review, this distinction matters: Enigm does not treat administration, billing, connectivity, monitoring, or device management as shortcuts around end-to-end encryption or protected key material.

<div className="enigm-card-grid enigm-card-grid--compact">
  <CardGroup cols={3}>
    <Card title="Privacy by design" href="/security/privacy">
      Foundational privacy principles for data minimization, identity minimization, metadata reduction, and user control.
    </Card>

    <Card title="Security model" href="/security/security-model">
      Defense-in-depth model across Enigm products, device trust, administrative control, secure delivery, and network privacy.
    </Card>

    <Card title="Cryptography" href="/security/cryptography">
      Cryptographic architecture, post-quantum protections, protected key material, signing, and verification workflows.
    </Card>
  </CardGroup>
</div>

## Documentation boundaries

This documentation is written for public review. It provides enough detail to evaluate architecture, trust boundaries, privacy posture, governance maturity, and product responsibilities while keeping deployment-specific details, private infrastructure relationships, internal routes, operational procedures, sensitive identifiers, secrets, and implementation-sensitive behavior outside the public record.

That boundary is part of the security model. Enigm should be understandable from the outside without making the platform easier to attack.

## Architecture vocabulary

The documentation uses generic architecture terms, including:

* Edge runtime.
* Private object storage.
* Metadata store.
* Secure identity layer.
* Threat intelligence pipeline.
* Hardware-Backed Signing.
* Controlled rollout system.

## Status language

When a detail varies by deployment, the documentation describes the behavior at a public architecture level and avoids deployable operational specifics.

When a control is not represented as current functionality, the documentation marks it as **Planned hardening layer** only when explicitly required.