Kalisme

Scope of this assessment: the Kalisme service as delivered to individual users and to professional customers.

In scope: the iOS and Apple Watch application; the kalisme.com website and its cookieless audience measurement; the relay that forwards companion messages to a language model; the end to end encrypted relay carrying support messages between a user and the relatives they chose; the telemetry pipeline; and Kalisme Pro, the platform where an organisation assigns and revokes its staff's seats.

Shared responsibility: Kalisme is a processor for seat administration data, which the customer's administrator controls, and an independent controller for personal use of the application.

Data handling: personal content stays on the user's device, encrypted with AES-256-GCM under a device keychain key that Kalisme never receives. Support messages use X3DH and a double ratchet, so the relay carries ciphertext only. Companion messages are relayed without server side storage; for Kalisme Pro seats the model runs in the European Union with zero data retention. Individual users hold no account and no password; named accounts exist only on the Kalisme Pro platform.

Hosting: OVHcloud (France), Hetzner (Germany) and, for the Kalisme Pro model, Amazon Web Services (European Union), all ISO/IEC 27001 certified. Seat records are separated by organisation, with authorisation enforced server side and revocation effective within 24 hours.