The structure is confidential. The communication should be too
Settlors, beneficiaries, protectors and co-trustees across jurisdictions — in one Swiss-hosted, end-to-end encrypted channel.
Built for the duty you hold · Not adapted to it
A trust runs on communication that was never designed to be secure.
The parties are the risk. A beneficiary forwards a distribution schedule. A settlor’s relative sits in the family WhatsApp group. You didn’t cause the leak and are still accountable for it.
Cross-border means cross-jurisdiction. One thread touching the US, the UK and Switzerland sits under three legal regimes — and under the reach of whichever platform hosts it.
A challenged decision needs a record. Your protection is a complete, timestamped one. Email threads and chat exports don’t meet that standard.
Since FinIA, trustees are supervised. The exposure is personal.
Insufficient channel governance is a documented SO finding category. Above the fine sit remediation, beneficiary claims, and policies that exclude unsanctioned channels.
Full exposure analysis →On the trustee, not the trust company.
Channel governance is inspected, not assumed.
Different in source, not in substance. Same architecture problem.
Every party to the structure, in one channel — verified.
Settlors, beneficiaries, protectors and co-trustees across jurisdictions — Swiss-hosted, end-to-end encrypted, on one record.
Verify every party with PostNumber
Passport verification issues each party a permanent identity tied to a verified address. You know who you’re communicating with — and can prove it later.
Deliver documents through a Workspace
Each party sees exactly what they’re entitled to. Nothing goes as an attachment, nothing sits in a family inbox. You see what was delivered, when, to whom.
Communicate without leaving the record
The request that used to arrive on WhatsApp stays inside the same auditable channel as the documents it concerns.
Private AI, inside your organisation’s environment
It helps you design how communication flows among the parties to a structure. Documents and drafts are processed in an isolated, Letro-operated European environment assigned to your organisation. No data to a third-party model, nothing used for training.
Built for the duty you hold, not adapted to it.
Infrastructure in Switzerland, operated by a Swiss company — shaped to your risk profile.
End-to-end on the Matrix open protocol; keys stay on your devices.
Exportable, timestamped, tamper-evident — across every jurisdiction in the structure.
Cryptography independently audited (vodozemac, Least Authority 2022). Independent penetration test of Letro by ImmuniWeb underway — September 2026.
Request a security briefing