Fiduciaries & trustees

The structure is confidential. The communication should be too

Settlors, beneficiaries, protectors and co-trustees across jurisdictions — in one Swiss-hosted, end-to-end encrypted channel.

Built for the duty you hold · Not adapted to it

FinIA
Supervised · SO oversight
CHF 250,000
Personal fine · FADP Art. 62
1 record
Across every jurisdiction
Audit-grade
Exportable · tamper-evident
The problem

A trust runs on communication that was never designed to be secure.

01

The parties are the risk. A beneficiary forwards a distribution schedule. A settlor’s relative sits in the family WhatsApp group. You didn’t cause the leak and are still accountable for it.

02

Cross-border means cross-jurisdiction. One thread touching the US, the UK and Switzerland sits under three legal regimes — and under the reach of whichever platform hosts it.

03

A challenged decision needs a record. Your protection is a complete, timestamped one. Email threads and chat exports don’t meet that standard.

Who carries it

Since FinIA, trustees are supervised. The exposure is personal.

Insufficient channel governance is a documented SO finding category. Above the fine sit remediation, beneficiary claims, and policies that exclude unsanctioned channels.

Full exposure analysis →
CHF 250,000
Personal fine · FADP Art. 62

On the trustee, not the trust company.

FinIA
Licensed · SO oversight

Channel governance is inspected, not assumed.

UK
Trustee duties · different source

Different in source, not in substance. Same architecture problem.

What moves into Letro

Every party to the structure, in one channel — verified.

Settlors, beneficiaries, protectors and co-trustees across jurisdictions — Swiss-hosted, end-to-end encrypted, on one record.

01

Verify every party with PostNumber

Settlors · beneficiaries · protectors · co-trustees

Passport verification issues each party a permanent identity tied to a verified address. You know who you’re communicating with — and can prove it later.

02

Deliver documents through a Workspace

Deeds · accounts · distribution notices · letters of wishes

Each party sees exactly what they’re entitled to. Nothing goes as an attachment, nothing sits in a family inbox. You see what was delivered, when, to whom.

03

Communicate without leaving the record

Message · voice · video

The request that used to arrive on WhatsApp stays inside the same auditable channel as the documents it concerns.

Private AI

Private AI, inside your organisation’s environment

It helps you design how communication flows among the parties to a structure. Documents and drafts are processed in an isolated, Letro-operated European environment assigned to your organisation. No data to a third-party model, nothing used for training.

See Private AI
The architecture

Built for the duty you hold, not adapted to it.

01
Swiss-hosted · your deployment

Infrastructure in Switzerland, operated by a Swiss company — shaped to your risk profile.

CloudSingle-tenantSovereignAir-gapped
02
Encrypted by default

End-to-end on the Matrix open protocol; keys stay on your devices.

03
One audit-grade record

Exportable, timestamped, tamper-evident — across every jurisdiction in the structure.

Cryptography independently audited (vodozemac, Least Authority 2022). Independent penetration test of Letro by ImmuniWeb underway — September 2026.

Request a security briefing

See where you stand.

A 90-second calculator shows your exposure range across five layers, the size of your potential insurance gap, and the procedures that reduce both. No form, no gate. The five-step migration off WhatsApp — including how to move a family without a family argument — is documented in the whitepaper.