Security & Trust

Hermes tries to keep its trust story product-specific, technically bounded and readable.

1. Separate lanes

Chats, calls, linked devices, Hermes Web, Ghost Mode, Hermes Sense and Wallet are distinct product lanes. Hermes improves them together, but it does not pretend they are all the same system.

2. Device and session control

Linked devices, session visibility, QR pairing and revoke controls are core product surfaces. Hermes Web follows the same trusted-device model instead of a detached browser login.

3. Media and storage

Hermes uses protected local caching, encrypted media transport flows and explicit storage controls for cache, message views and temporary data.

4. Ghost Mode boundaries

Ghost Mode adds an optional conversation-level privacy layer. It can protect message views, clarify visible signals and prefer nearby foreground transport when available, but it is not marketed as perfect invisibility or permanent background mesh networking.

5. Hermes Sense boundaries

Hermes Sense stays product-bound. It does not silently read all chats, and connected assist remains explicit instead of hidden behind vague claims.

6. Calls remain distinct

Voice and video calls keep their own signaling and WebRTC lane. Hermes does not weaken that path to bolt on unrelated features.

7. Wallet boundaries

Hermes Wallet is non-custodial and product-bound. It is presented as an on-chain wallet lane, not as custodial finance or an exchange product.