FirmaSys

Secure team communication

Communications sealed in trust.

Secure messaging, calls, urgent alerts and on-call scheduling for teams that cannot afford a missed message, from hospitals and law firms to IT operations and field crews. Every message is end-to-end encrypted and signed by its sender.

Sign in to FirmaSys See it in your industry

On the web today. The iPhone app is coming to the App Store.

SIGNATURE VERIFIED · SEALED END TO END

What it does

One place for the conversations that matter.

FirmaSys brings messaging, calls, urgent alerts and the on-call schedule together, so the right person gets the message and you know they did.

Messaging

Secure conversations for every team

One-to-one and group conversations for everyone on the team, on the phone and on the web.

  • End-to-end encrypted: only the people in the conversation can read it.
  • Photos, documents and voice memos, played right in the chat.
  • Delivered and read receipts, so nothing is left wondering.
A group conversation in FirmaSys between members of a hospital team

Urgent alerts

Urgent messages that get answered

Mark a message urgent and choose how quickly it must be acknowledged.

  • Recipients are reminded until they acknowledge.
  • You see who has acknowledged, and when.
  • If nobody responds in time, escalate to the backup on call in one tap.
An urgent message waiting for acknowledgement

On call

Know who is on call, right now

Schedules, rotations and shifts live next to your messages, so finding the right person takes seconds.

  • Search any group, team or person and see who covers it at this moment.
  • Primary and backup, with one tap to message them.
  • Calendars, rotations, time off and shift swaps for schedulers.
The on-call view showing who covers each group

Partner organizations

Partners reach the right person

An organization can share chosen on-call schedules with its partners, so they find whoever is covering right now without a phone tree. In healthcare, for example, practices share theirs with the hospitals in their area.

  • Each organization decides what it shares, and with whom.
  • Partners see who is on call now and message them securely.
  • Both organizations keep the conversation in their own records.
A hospital finding the doctor on call at a partner practice

And everything around it

Audio and video calls

One-to-one calls from any conversation, encrypted between the two devices. Nobody hands out a personal number.

Voice memos

Hold, speak, send, for when typing is not practical: on a ladder, in gloves, or between meetings.

Shifts and swaps

Rotations, time off and swap requests, and every person sees their own upcoming shifts.

Several organizations, one app

People who work for more than one organization switch between them, and each organization's data stays separate.

Ready when the signal is not

The iPhone app opens without a connection and shows what it saved. Messages written offline are sent once you are back online.

Locked down by default

Invitation only, roles per organization, and Face ID lock on iPhone.

Industries

Built for teams where a missed message costs something.

Choose an industry to see a typical moment, the conversation as it happens in FirmaSys, and the features doing the work.

Healthcare

The emergency department needs the cardiologist on call, at 2 a.m.

A hospital nurse has a patient with rising troponin. The cardiologist on call works for a partner practice, and there is no time for a switchboard.

  • The hospital sees who covers cardiology right now, from the schedule the practice chose to share.
  • An urgent message with a five-minute acknowledgement: reminders until it is answered, and one tap to escalate to the backup.
  • Both organizations keep the conversation in their own records. Patient details stay end-to-end encrypted, and we sign a business associate agreement for HIPAA.
Dr. Amira HaddadShared with Lakeside Hospital · encrypted
On call now · Cardiology, Riverbend HeartDr. Amira Haddad until 07:00
Backup: Dr. Paul Chen
URGENTJen Alvarez, RN · ED64-year-old, chest pain, troponin rising. ECG attached.ECG_0211.pdf · 240 KBAcknowledge by 02:19
Acknowledged. Reviewing now, calling you in 2 minutes.02:16 · Read
Call · 3:48
Voice memo · 0:37

Financial services and accounting

A wire request that looks like it came from the CFO.

On quarter-close night, treasury receives an email asking for a large wire to a new beneficiary. Email can be spoofed; the team needs to confirm with the approver on call.

  • Every message is signed by its sender, so a confirmation in FirmaSys provably comes from that colleague.
  • The approver rotation shows who can authorize right now, with a backup, and a video call is one tap away.
  • Your organization's records key keeps the exchange for audit and compliance review.
Treasury operationsGroup · 6 members · encrypted
URGENTLena Brooks, TreasuryWire request for $480,000 to a new beneficiary, by email "from the CFO". Holding it until an approver confirms.Acknowledge by 16:45
On call now · Treasury approvalsDana Whitfield until 20:00
Backup: Omar Siddiqui
Video call · 2:31
Dana WhitfieldThat request is not from us. Do not release. Reporting it to security now.16:41 · Read by 5

IT and managed services

A client's production database goes down at 03:10.

The monitoring desk sees the outage. The primary engineer on call is asleep through the alert, and the client wants updates in one place.

  • On-call rotations with primary and backup, visible to the whole desk.
  • Reminders until the urgent message is acknowledged, then escalation to the backup on call.
  • A conversation shared with the client's organization, where each side keeps its own record.
Incident · ERP outageShared with Northwind Supply · encrypted
On call now · InfrastructurePriya Nair until 08:00
Backup: Marcus Lee
URGENTNOC · Alex MorenoERP database cluster unreachable, failover did not trigger.Acknowledge by 03:15 · reminder sent 03:12
Not acknowledged in time · escalated to Marcus Lee, backup on call
Marcus LeeOn it. Failover log attached, promoting the replica now.failover-log.png · 310 KB
Northwind ITThanks, we see orders flowing again.03:41 · Read

Property and facilities management

Water is coming through a tenant's ceiling on a Sunday morning.

The resident manager needs the weekend maintenance tech now, not after a voicemail chain.

  • Weekend and night coverage in shift schedules, with swaps when plans change.
  • Photos and voice memos from the site, right in the conversation.
  • Urgent messages with an acknowledgement time, so the manager knows someone is coming.
Maple Court · MaintenanceGroup · 4 members · encrypted
URGENTGrace Liu, Resident managerWater coming through the ceiling in 4B from 5B.unit-4B-ceiling.jpg · photoAcknowledge by 09:20
On call now · Weekend maintenanceLuis Ortega until 18:00
Backup: Kim Tran
Luis OrtegaAcknowledged. Shut-off is in the 5th-floor closet. On my way, 15 minutes.09:14 · Read
Voice memo · 0:24

Field service and utilities

A line down during a storm, with crews out of signal range.

Dispatch needs the nearest crew to confirm. Crews move in and out of coverage, and typing in gloves is not an option.

  • The iPhone app opens without a connection and sends messages written offline once the crew is back in range.
  • Voice memos for hands-busy updates; photos for the record.
  • Storm-duty shifts and urgent acknowledgements, so dispatch knows who has it.
Storm response · North districtGroup · 12 members · encrypted
URGENTDispatch · R. WalshLine down on Route 9 at mile 14, live wire reported. Nearest crew, acknowledge.Acknowledge by 18:50
Crew 3 · T. BooneAcknowledged. Crew 3 en route, about 20 minutes.18:46 · Read
Voice memo · 0:41
Crew 3 · T. BooneArea secured, pole replacement needed.pole-14.jpg · photoWritten offline 19:20 · sent 19:32

Hospitality and hotels

A guest is hurt during a sold-out gala.

Front desk, security and the duty manager need to act together, quickly and discreetly, without broadcasting on open radio.

  • The duty manager rotation shows who is in charge tonight, with a backup.
  • One group conversation across front desk, security and management.
  • The records key keeps the exchange for the incident report.
Grand Harbor · Duty teamGroup · 7 members · encrypted
URGENTFront desk · NadiaGuest fell in Ballroom B, conscious, EMS called. Duty manager to Ballroom B.Acknowledge by 21:05
On call now · Duty managerElena Rossi until 23:00
Backup: Sam Becker
Elena RossiWith the guest now. Security, please clear the service corridor for EMS.21:03 · Read by 6
Security · KofiCorridor clear. EMS arriving at the loading dock.

Manufacturing and plant operations

A hydraulic leak stops a line on the night shift.

Every minute of downtime costs output. The operator needs the maintenance engineer on call to see the problem and make a decision.

  • A video call from the conversation, so the engineer sees the leak without driving in.
  • Night and weekend maintenance coverage in shift schedules, with swaps.
  • Urgent acknowledgement and escalation to the backup engineer.
Plant 2 · Line 4Group · 9 members · encrypted
URGENTOperator · B. KowalskiHydraulic leak on press 4, line stopped.press4-leak.jpg · photoAcknowledge by 02:40
On call now · Maintenance engineeringRavi Patel until 06:00
Backup: Jo Lindqvist
Video call · 6:15
Ravi PatelIsolate press 4 and run on press 3 at 80%. Seal kit ordered, swap at 06:00.02:51 · Read by 8

Public safety and emergency management

A flood warning that needs several agencies on the same page.

The county emergency operations center needs the water district's duty officer to confirm pump stations before the river crests. FirmaSys complements dispatch and radio systems; it does not replace them.

  • A conversation shared between agencies, where each keeps its own record.
  • The partner agency's duty officer is found from the schedule it shares, not a contact list.
  • Urgent acknowledgement, files and one-to-one calls in one thread.
T. MensahShared with Riverside Water District · encrypted
On call now · Water district duty officerT. Mensah until 07:00
Backup: A. Ferreira
URGENTCounty EOCGauge at 18.2 ft, forecast flood stage by 04:00. Confirm pump station status.Acknowledged by T. Mensah 01:24
T. MensahStations 2 and 5 running, station 3 on generator. Status sheet attached.pump-status.xlsx · 52 KB
Call · 5:02

Logistics and transportation

A refrigerated load is warming up at a border crossing.

The driver reports a temperature alarm while held at inspection. The customer's quality team must decide: hold, reroute or reject.

  • A conversation shared with the customer, so their quality lead on call decides directly.
  • Voice memos from the cab, and photos of the readout for the record.
  • Urgent acknowledgement, so dispatch knows the decision is being made.
Load 7741Shared with Coastline Foods · encrypted
Driver · Voice memo · 0:33
URGENTDispatch · H. NovakReefer alarm on load 7741, product at 6 °C, held at inspection. Hold or reroute?Acknowledge by 11:20
Coastline QA on call · P. OkoyeHold. Send a photo of the probe readout, please.
Driverprobe-readout.jpg · photo

Your industry is not listed? If your people need to reach the right person quickly and keep a trustworthy record, FirmaSys fits. Tell us about your team.

Security

Sealed by design, not by promise.

Messages are encrypted on the sender's device and opened only on the recipients' devices. Our servers relay and store ciphertext they cannot read.

End-to-end encrypted

Messages, files and voice memos are encrypted with keys that never leave the people in the conversation.

Signed by the sender

Every message carries a signature only its sender can produce, so you know who wrote it and that it was not changed.

Records your organization keeps

Your organization holds its own records key, so it can retain and review its communications for compliance. We cannot.

MESSAGE · encrypted on device · AES-256-GCM
KEYS · per conversation, wrapped for each member · P-256
SIGNATURE · ECDSA, verified on every device
ACCESS · Face ID lock · invitation only · roles per organization

Getting started

Up and running in an afternoon.

Set up your organization

We create your organization and invite its owner, who sets up the records key and places of work.

Invite your team

Admins invite colleagues by email. Each person sets up secure messaging on their phone or browser.

Add your schedules

Build rotations and on-call calendars, then share them with partner organizations if you choose.

Ready when your team is.

FirmaSys is available to organizations by invitation. Tell us about your team.

Contact us Sign in