Six apps.
One vault.
Each name is a bunker-world pun that says what it does. Lead with the codename; the subtitle is the function. Click any placard for the detail page, including exactly what leaves your machine and when.
Office, comms, web.
Draft
DocumentsThe word processor. Write, format, export DOCX and PDF. All of it in the vault, none of it in a cloud.
Open DraftGrid
SpreadsheetsSheets, formulas, charts. XLSX in and out. Your numbers never touch a server.
Open GridBriefing
PresentationsSlide decks. Build, present, export PPTX and PDF. The whole office trio shares one engine.
Open BriefingDispatch
MailA full IMAP, SMTP and JMAP mail client with a local encrypted store. PGP is automatic between Bunker users and opt-in to outsiders. Reads and composes offline.
Open DispatchRelay
MessengerEncrypted group messaging built on MLS. No phone numbers, no SMS, no address-book upload. Your identity is a key on your device. Ships on Android in v1 too.
Open RelayPeriscope
BrowserA tabbed browser on the platform webview, with no bundled browser engine. DuckDuckGo by default, tracker and ad blocking on, history and bookmarks in the vault. It contacts nothing on its own.
Open PeriscopeWhat they stand on.
Three pieces you mostly never see. Named here because the security page refers to them.
Icebox
The vaultThe shared, on-device encrypted store every app sits on: SQLCipher plus an encrypted blob store. This is the cold storage the whole brand is named for.
INFRA · COREBedrock
Vault-core engineThe Rust core. All cryptography, keys, storage, sync, mail and messaging live here once and are shared by every app. Mostly invisible, which is the point.
INFRA · RELAYOutpost
Store / relay serverThe optional, self-hostable server that relays encrypted sync and messages. Net-Com can run one for you, or you run your own as a single binary or container. It never receives a key.