Kalisme

Scope of this assessment: the Kalisme service as delivered to individual users and to professional customers.

In scope: the iOS and Apple Watch application; the kalisme.com website and its cookieless audience measurement; the relay that forwards companion messages to a third party language model; the end to end encrypted relay carrying support messages between a user and the relatives they chose; the telemetry pipeline; and Kalisme Pro, the platform on which an organisation assigns and revokes seats for its staff.

Shared responsibility: Kalisme is a processor for seat administration data, which the customer's administrator controls, and an independent controller for personal use of the application. That split is written into its data processing agreement, because it decides who answers a data subject.

Data handling: personal content stays on the user's device, encrypted with AES-256-GCM under a key held in the device keychain that Kalisme never receives. Support messages use X3DH key agreement and a double ratchet, so the relay carries ciphertext only. Companion messages are relayed without server side storage. There is no user account and no password.

Hosting: OVHcloud in France and Hetzner in Germany, both ISO/IEC 27001 certified. Seat records are separated by organisation, with authorisation enforced server side and revocation effective within 24 hours.