End-to-end encrypted client spaces
Calospace gives professionals a permanent, private space for each client — session notes, documents, plans, and receipts, under your own name and brand. Everything is encrypted before it reaches us and unlocked only on your client’s device. We store it. We cannot read it.
Built for confidential work — therapists, coaches, accountants, lawyers, advisors, and anyone whose clients trust them with more than files.
What a space holds
Secure file-sending exists. A structured, permanent, private space for each client doesn’t — until now.
Each space carries your brand, not ours. To your client, this is your practice’s private room — Calospace is the lock on the door.
Notes, plans, documents, and receipts are organized as what they are — a living record your client can return to, not attachments lost in an inbox.
You send a private link; it opens their space. No account, no password to start — a password only if they want a second device.
Clients book on your page and pay by card — processed by Stripe, paid to you, through your own connected account. Receipts file themselves into the client’s space, so every charge matches a session.
How it works
Your client opens the private link you sent. Their device quietly creates its own keys; the private key never leaves it.
Everything you share is encrypted on your side before it touches our servers. We receive, store, and deliver ciphertext — nothing else.
A secret carried inside your link — never sent to our servers — lets your side verify your client’s key. Even Calospace couldn’t swap it without detection.
Trust by architecture, not by promise
We hold no key that opens your clients’ data. Reading it at scale would require shipping visibly modified code to every user; reaching even one account would require an active, targeted attack — an attack, not a capability we possess.
And we keep almost nothing else. Clients can be invited without us ever learning their email. Logs are minimal and short-lived. If we’re ever required to answer for an account, the truthful answer is one sentence: a public key, sealed data we cannot open, and a last-connection date.
The full security model, what little we do process, and why: see our privacy policy.
That link is the way in — no signup needed. Your notes, documents, bookings, and receipts are waiting inside. Can’t find your link? Only your provider can resend it — just ask them.
Get started
Tell us what you do and how you work with clients, and we’ll show you what their spaces would look like under your brand — usually within a day or two.
hello@calospace.comBuilding a platform of your own? The same encryption is becoming an API — write to us and say so.