Secure messaging for government, ministries and departments
SANKET (Sanket.Chat) by Tosh Defence is a sovereign secure messaging platform for government: ministries and departments get end-to-end encrypted messaging, file exchange and voice and video calls on a dedicated installation they control. Content is encrypted with Signal's independently audited libsignal and AES-256, and the installation runs on infrastructure the government chooses, including Indian data centres, its own premises or a closed network.
Policy deliberation and inter-departmental coordination belong on a platform the government owns, not on a consumer app or a foreign-hosted service. SANKET is a government messaging platform built in India, for sovereign nations.
A government messaging platform the government owns
SANKET has no public directory and no vendor-operated server that officials connect to. Users exist only inside the installation the department controls, and the department decides how they are admitted: by administrator provisioning, by directory provisioning or by single-use invitation, the default.
That removes attack paths consumer services have by design: account creation by an arbitrary adversary, contact discovery across organisations and vendor-side access to the user graph.
Identity that plugs into existing government systems
User lifecycle can be driven from the department's own directory through SCIM 2.0: joiners, movers and leavers are created, updated and suspended automatically. An installation can also require the user's directory password, over LDAPS or StartTLS, when a device is enrolled, alongside TOTP and device approval.
Administrators sign in with FIDO2 security keys, optionally through the department's own OpenID Connect or SAML 2.0 identity provider. Public identity providers are refused.
- SCIM 2.0 directory provisioning
- LDAP and Active Directory enrolment checks
- FIDO2 security keys for administrators
- Integration API and signed webhooks
Records, retention and accountability
Retention is set by the department: message hot window, broadcasts, call logs, alerts and disappearing messages are all configurable. Security and administrative events are written to a SHA-256 hash-chained audit log, recorded by Sanket ID, verifiable on demand and exportable to the department's SIEM over TLS-protected syslog.
Audit records never contain message content, ciphertext or keys, so accountability never comes at the cost of confidentiality.
Sovereign by architecture, not by promise
Every component runs inside the government's own installation. Licences are verified locally, updates arrive as signed packages that the department approves before installation, and no vendor service sits in the message path. Routing metadata needed to deliver messages stays inside the government's own installation.
Technical proof
Read the detail in the SANKET whitepaper
Every statement on this page is set out in full in the public SANKET Technical Security and Architecture Whitepaper, free to read without registration.
What is a secure messaging app for government in India?
SANKET by Tosh Defence is a sovereign secure messaging platform built in India for government use. Each ministry or department runs a dedicated installation on infrastructure it chooses, with Signal Protocol end-to-end encryption, post-quantum key agreement and AES-256.
Where is government data stored with SANKET?
Wherever the government chooses: an Indian data centre, its own premises or a closed network. SANKET is a dedicated, self-hosted installation, so data never sits on a shared or foreign-hosted service.
Can SANKET integrate with our directory and single sign-on?
Yes. Users can be provisioned from the department's directory through SCIM 2.0, enrolment can be checked against LDAP or Active Directory, and administrators can sign in through the department's own OpenID Connect or SAML 2.0 identity provider together with a FIDO2 security key.
Can administrators read officials' messages?
No. Administrators govern identities, devices and policy. The server holds no content keys, so messages, files and calls remain readable only on the devices of the people in the conversation.
Can retention be set to match government record policy?
Yes. Retention for messages, broadcasts, call logs, alerts and disappearing messages is configured by the department's administrators.
How does a department evaluate SANKET?
Through a structured technical evaluation with Tosh Defence: a briefing, the public whitepaper and, under a non-disclosure agreement, the controlled edition with the detail evaluators need.
Put government communications on infrastructure you own
Tosh Defence briefs ministries and departments on deployment options, identity integration and evaluation, from a dedicated hosted installation to a fully air-gapped one.