A hybrid key exchange using a NIST standard and an established classical method.
For IT advisers and the technically curious
How QVU works: encryption, architecture and standards.
For IT advisers and the technically curious: how QVU protects email and files, and the standards it is built on.
01 / Cryptographic profileKey exchangeML-KEM-768 + X25519 Digital signaturesML-DSA-65 + Ed25519 HashingSHA3-384 Symmetric encryptionAES-256-GCM Transfer envelopesASiC-E
Protection, layer by layer.
Paired signature methods authenticate each message.
Used in the cryptographic design.
For data in transit and at rest.
Envelopes are wrapped per recipient.
Both halves of each pair must be broken, so protection is never weaker than today's best practice.
02 / Why hybrid
We use all available network security — we just don't rely on it.
QVU combines today's proven encryption with NIST's new standards built to withstand quantum computers. The EU's post-quantum roadmap recommends hybrid schemes wherever feasible. EU Coordinated Implementation Roadmap, June 2025.
The EU roadmap calls for Member States to begin transitioning by the end of 2026. It sets out qualified targets for high-risk systems by the end of 2030, and transition of the rest as far as feasible by the end of 2035. These are roadmap targets, not product launch dates.
03 / Where keys live
Keys stay on your device.
Keys are made and held only on your device, in one engine that does all encryption. QuantumViva's servers register users, show who is available and pass on sealed packages they can't open.
Only you hold the keys: not your email provider, not us.
04 / How protected email travels
Your email account stays in the flow.
Each message is sealed and signed on the sender's device, sent through the sender's own email account, and opened only in the recipient's QVU. Each contact is verified once by short code before a connection opens.
QVU works on top of Microsoft 365, Google Workspace or any email provider. QVU runs on Windows and macOS.
05 / Vault protection
Ransomware protection for your vault.
- Windows Controlled Folder Access
- Protected macOS container
- Canary files with a write-rate lock
- Versioned backups
For plain-English product detail, see what's inside QVU.
06 / Firm recovery key
Your firm's own recovery key.
Your firm creates its own recovery key, held by people you choose. Any two can use it. QuantumViva never holds any part of it.
07 / Your email provider and QVU
Who can open what?
Comparison as of 2 November 2026. Product capabilities and plan availability can change. QVU is in build; this is a comparison of design scope, not an independent product test.
| Question | Most Microsoft 365 and Gmail plans | QVU |
|---|---|---|
| Who holds the keys? | The provider. Microsoft Learn · Google Workspace | You, on your own devices. QVU product design |
| Can the provider open your mail? | Provider services process email. Microsoft Learn: Double Key Encryption · Google Workspace: client-side encryption | No. It only ever holds sealed data. QVU product design |
| A US CLOUD Act demand | A US company can be required to produce data it controls, wherever stored. Hunton Andrews Kurth, April 2019 | Nothing readable to hand over. QVU product design |
| Keys held by the customer | Microsoft 365 E5 Double Key Encryption or Google Workspace Enterprise Plus client-side encryption. Microsoft Learn · Google Workspace | Every plan is designed around keys on your device. QVU product design |
| Quantum-resilient encryption | Microsoft says early adoption by 2029 and transition complete by 2033. Microsoft, August 2025 | Built into QVU's design. Cryptographic profile |
As of 2 November 2026. Sources are linked within each cell. “Most plans” does not describe every plan or configuration.
08 / Other secure tools
A scoped view of other products.
As of 2 November 2026. Sources are linked in every comparison cell. This table describes published product scope and is not an independent test. Product features vary by plan, platform and settings.
| Capability | QVU | Proton | Tuta | 1Password | ShareFile | SmartVault |
|---|---|---|---|---|---|---|
| Keep your current email | Works on top of your account. QVU design | Proton Mail service. Product overview | Tuta Mail service. Product overview | Password manager, not an email provider. Product overview | File sharing and client collaboration. Product overview | Document management for accounting. Product overview |
| Post-quantum encryption | Designed with NIST's new standards. QVU profile | Available on all plans as an opt-in setting, May 2026. Proton | All accounts as of March 2026. Tuta | Not established in cited product overview. Product overview | Not established in cited product overview. Product overview | Not established in cited product overview. Product overview |
| Only you hold the keys | Keys held on your device. QVU design | See Proton's encryption and key documentation. Proton security | See Tuta's encryption overview. Tuta security | Encrypted password vault. 1Password security | Product overview does not establish this QVU-specific scope. ShareFile overview | Product overview does not establish this QVU-specific scope. SmartVault overview |
| Firm recovery built in | Firm key-holders can recover a leaver's mailbox. QVU design | Not established in cited overview. Proton overview | Not established in cited overview. Tuta overview | Account recovery varies by plan. Business overview | Administrative account controls. ShareFile overview | Firm document workflow. SmartVault overview |
| Signed evidence record | Signed evidence is in design scope. QVU design | Not established in cited overview. Proton overview | Not established in cited overview. Tuta overview | Not established in cited overview. 1Password overview | Not established in cited overview. ShareFile overview | Not established in cited overview. SmartVault overview |
| Clients get their own app, not a web portal | Clients use QVU with the inviting firm. QVU design | Proton Mail apps and web access. Proton overview | Tuta apps and web access. Tuta overview | Apps and browser access. 1Password overview | Client collaboration options. ShareFile overview | Client portal functionality. SmartVault overview |
“Not established” means the cited source does not establish the specific scope in this comparison, not that a product cannot do it.
09 / Standards path
Designed to be tested against recognised standards.
Designed for FIPS 140-3 validation. GDPR-aligned. Maps to the EU Cyber Resilience Act. These are design intentions, not certifications or a claim of compliance.
10 / Assurance
Assurance before anyone uses QVU.
Our protocol designs are being formally verified, and QVU gets an independent cryptography review and penetration test before anyone uses it. We welcome responsible vulnerability reports through our Responsible Disclosure process.
11 / Technical brief
Read the technical overview.
For a concise summary of the product's technical scope and design.
Want to understand the details?
QVU is in build. Join the waitlist for priority access, and your first month free.
Opens an email draft; you must send it. Nothing is saved by this website.