Who Venoly is
Venoly is an independent, EU-based communication platform. Its foundations date to 2015, when it operated as a business / enterprise-only communications product. It was substantially rebuilt — new architecture, a new in-house security stack, a new audience — and relaunched as the security-first community platform it is today. The consumer site (venoly.nl) is recent; the project and the team behind it are not. The enterprise-grade auditing and security depth is inherited from those business roots, not over-engineering for its own sake.
Key facts
| Category | Real-time communication & community platform (text, voice, video). |
| Positioning | Security-first, privacy-respecting, independent. |
| Founded | 2015 (as a business/enterprise platform); rebuilt for communities. |
| Jurisdiction | European Union; built GDPR-first. |
| Price | Free. Optional plans (Spark, Premium, Aurora, Supernova) and server boosts add extras; nothing free today moves behind a paywall. |
| Business model | Not ad-supported. No tracking pixels, no third-party ad SDKs, no cross-web analytics. |
| Platforms | Web, Android, and desktop (Windows and Linux). |
Mission
Bring enterprise-grade security and privacy to everyday communities — without the surveillance business model. Security at Venoly is inspectable and deterministic (you can read the policies), integrity is verifiable (hash-chained logs and message provenance), and privacy is architectural (encryption at rest, de-identification, no trackers, EU/GDPR-first).
Named subsystems (glossary)
These in-house systems are referenced across Venoly’s documentation:
| Subsystem | What it is |
|---|---|
| Venilator | In-house security-policy language (.vnl) compiled to bytecode and run on a sandboxed stack VM. |
| Aegis | Behavioral anti-abuse engine using a deterministic timing statistic to separate bots from humans. |
| Sentinel | Account-takeover defense that risk-scores logins and triggers step-up challenges. |
| Cipher | Append-only, hash-chained audit ledger. |
| Warden | Per-message provenance that detects silent, out-of-band edits to stored messages. |
| Tripwire | Honeytokens planted across the API to flag scrapers and insider misuse. |
| Vault & Smush | Versioned encryption at rest plus structural de-identification of stored data. |
| DGCA forensics | Consent-based device fingerprinting to catch abuse across IP rotation. |
| Aura | Venoly’s cosmetics and upgrades: the optional personal plans and server boosts. |
Contact
| Purpose | |
|---|---|
| General / press | press@venoly.nl |
| Security / vulnerability reports | security@venoly.nl |
| Privacy / data protection (GDPR) | privacy@venoly.nl |
| Trust & safety | safety@venoly.nl |
| Business inquiries | founder@venoly.nl |
More: security deep-dive, documentation index, FAQ, and the machine-readable /llms.txt.
