Sovereign, post-quantum, EU-built. Mission-driven.
UltimaOS is a sovereign European web operating system: sixteen end-to-end encrypted applications that share one private key, on infrastructure hosted exclusively in the European Union. We are building the operating system we wished existed — a workspace that does not monetize your data, does not leak it to third parties, and does not pretend that post-quantum cryptography is a future problem.
Thirty years in law, finance and European institutions. Passionate about AI, uncompromising on data sovereignty. Created uOS because the tools we entrust our lives to should themselves be trustworthy.
Meet the rest of the team →Free email, free chat, free cloud storage — the business model is the same: harvest behavioural data, profile the user, sell the profile to advertisers and data brokers. We think a workspace should not work that way.
Adversaries can already capture and store encrypted traffic today, then decrypt it later when a quantum computer is available. The transition to NIST-standardized post-quantum primitives (ML-DSA-65, ML-KEM-768, XChaCha20-Poly1305) is urgent. We did the transition. We ship it by default.
A workspace built and hosted in the EU, on EU servers, governed by EU law. The US CLOUD Act does not apply. GDPR compliance is architectural, not contractual. The same cannot be said of US hyperscalers.
We do not run ads. We do not profile users. We do not sell data, ever. There is no analytics service that phones home with usage events from the workspace.
We cannot read your data — by architecture, not by promise. There is no encryption backdoor, no master key, no key escrow. Even compelled by a court order, we have no technical means to decrypt user content.
You can export your encrypted content at any time. The export is encrypted to a key you control. You can leave. We do not hold your data hostage.
We do not take venture capital. UltimaOS is self-funded by its founder. No quarterly growth targets. No exit pressure. No conflict of interest.
The cryptographic stack we use is published and standardized (NIST, IETF), so the algorithms can be checked independently against those specifications. The client ships to your browser as a standard single-page app, so its cryptographic code can be inspected directly in developer tools. That gives inspectability, not yet mechanical verification — signed reproducible builds are on the roadmap. The backend is proprietary; you can interrogate its behaviour from inside uOS, where uAI answers questions about it.
We will publish a transparency report when there is activity to report — government requests received, our response, and how we handled them. We disclose what we store, what we do not, and why.
Short answer
UltimaOS is an independent, founder-led project, built and operated in the European Union, on EU infrastructure, under EU law. Its mission and principles are documented across this site.
Short answer
Independently — UltimaOS is self-funded by its founder. We do not take venture capital.
Short answer
UltimaOS is based in the European Union. Our operations, infrastructure, and primary team are EU-based.
Short answer
Small. A core team of engineers, cryptographers, and operators, plus a wider circle of contributors and advisors. We hire selectively and prioritize density of competence over headcount.
Short answer
Use the contact form on this site for general inquiries. For security disclosures, write to patrick@ultimaos.com. For privacy or DPO matters, write to patrick@ultimaos.com. For press, patrick@ultimaos.com.
No ads, no data mining, no trial clock. Individual and family accounts are free — permanently. Organisations pay per seat, and that is what funds it.