CSA STAR Registry
Security, Trust, Assurance, and Risk Registry
Listings for Kalisme
Kalisme is a sole proprietorship based in Lausanne, Switzerland. It publishes Kalisme, a personal development application for iPhone, iPad and Apple Watch, and the services supporting it: the kalisme.com website, a relay to a third party language model for the in-app companion, an end to end encrypted relay for its support messaging, a telemetry pipeline, and Kalisme Pro, where organisations administer their staff's seats.
Its security posture is carried by architecture rather than procedure, and is verifiable rather than promised. Individual users hold no account and no password; named accounts exist only for Kalisme Pro administrators. Personal content is encrypted on the device with a key Kalisme never holds, so it cannot produce that content, even under legal compulsion. No third party SDK or advertising tracker is embedded, and audience measurement uses no cookie and no identifier.
Hosting is in the European Union, at OVHcloud in France and Hetzner in Germany, both certified ISO/IEC 27001. For Kalisme Pro seats, the language model runs in the European Union on Amazon Web Services, with zero data retention. Individual users' companion messages go to a provider in the United States, with consent collected before any message is sent.
Kalisme holds no external certification, has had no independent penetration test and has no formalised continuity plan. These gaps are named in its CAIQ rather than hidden.
Kalisme
Scope of this assessment: the Kalisme service as delivered to individual users and to professional customers. In scope: the iOS and Apple Watch ap...
Listed Since: 2026-08-25
