encrypted1on1

A self-hosted, end-to-end encrypted platform for running 1:1 meetings between managers and employees.

More: screenshots — login, the 1:1 list, an empty vs filled-in 1:1 with private notes, the report view, dark mode, 6 supported languages, and a look at what the server's own API response actually contains.

Status

Production-ready and feature-complete (v1.8.0):

• End-to-end encrypted 1:1 cycles: role-specific questions for employees and managers, Markdown-formatted answers with strict sanitization, private drafts, silent in-place editing, a confirmation before a meeting is closed, a shared "Topics to discuss" list visible before either side publishes, threaded comments, shared checklist outcomes with author ownership, and goal tracking with encrypted progress checkpoints.
• Private meeting notes: an author-scoped encrypted notepad on every 1:1 (sticky side-column on desktop, card on mobile) that neither counterparts, server operators, nor admins can read. Includes background autosave, multi-tab conflict resolution, "Hide notes" for screen-sharing privacy, and inclusion in user data exports.
• Meeting templates & custom library: 5 built-in templates (Regular check-in, Quick check-in, First 1:1 / Onboarding, Career growth, Support & workload check-in) plus company-authored custom templates created by admins in an interactive editor; immutable template versioning; next-meeting type picker at archive, with an option to swap the two roles for the next 1:1; ad-hoc one-off meetings that don't fork recurring chains or duplicate carry-forward items; one-meeting types (onboarding, career growth, support) fall back to regular check-ins on the next cycle, while the Quick check-in and company templates repeat; company templates can be exported, imported and shared as a file or a link.
• Live in-meeting collaboration: real-time background sync during meetings so counterpart answer edits, new comments (with ARIA live announcements), topics, outcomes, and checkpoints appear automatically without page reloads; a banner while the connection is lost, with unsaved drafts and notes saved on reconnect; either participant can tick questions off as discussed, dimming them on both screens as an encrypted, size-padded agenda tracker.
• Streamlined read-only view: clean display for published and archived 1:1s showing only answered questions and selected choices rather than long lists of empty fields or disabled controls.
• Analytics & reports: grouped 1:1 list by date or counterpart, mood/workload sparklines, upcoming meeting countdown badges, a calm "not closed" prompt for a meeting past its date, a permanent per-pair link for calendar events, client-side cross-period growth reports, a list of all my private notes with search, and company admin adoption reports.
• Security & resilience: zero-knowledge ciphertext storage, drafts encrypted with keys derived from private keys (surviving password changes), forgotten-password recovery with keypair regeneration and counterpart re-sharing, atomic archiving (no duplicate successors), rate limiting, CSP+SRI hardening with explicit HSTS, and automated privacy test gates.
• Accounts & administration: configurable registration (invite-only, admin-only, or email-domain self-registration), account settings (in-app password change, notification toggles, JSON data export, account deletion), admin user management and invite auditing, an optional company org structure (one manager per person, set by an admin or imported from CSV), recovery from expired invitation links, sessions that survive deploys with a 12-hour idle timeout and an opt-in "Remember this browser for 30 days", and automated emails: business-day meeting reminders, a reschedule notice, and a follow-up after a meeting nobody closed.
• Accessibility & internationalization: full keyboard navigation with focus retention across actions, 6 UI languages (English, German, French, Spanish, Russian, Latvian) with matching localized emails, dark mode, and Web App Manifest (PWA).
• Architecture & backend: hand-composed Symfony backend decomposed into dedicated repositories and domain lifecycle services, typed DTO request payloads with Symfony validation, Doctrine multi-tenant isolation filters, and JSON-standardized API error formatting.
• Deployment & operations: single-container FrankenPHP stack serving the API and SPA, automated database migrations (SQLite or MySQL), automated backup/restore scripts, and options for standalone Let's Encrypt HTTPS or running behind an existing reverse proxy.

See CLAUDE.md's "Current stage" section and docs/history.md for the detailed development log and architectural decisions.

Core idea

• Self-hosted. Your company runs it, your data stays on your own infrastructure.
• End-to-end encrypted. 1:1 content is encrypted client-side; the server only ever stores ciphertext derived from each user's password. Not even whoever operates the server can read it.
• Open source. Licensed under AGPLv3, so the privacy claims above can actually be verified by reading the code, not just taken on faith.

Documentation

• docs/ — start here: how the encryption works, the 1:1 methodology behind it, the beginner-friendly 1:1 playbooks (for managers, direct reports, and all meeting templates), the user flow it produces, the application architecture, and how to deploy it (dev, both production setups, and a full configuration reference).
• CLAUDE.md — development notes for anyone working on the codebase itself.

This is the beginning of the README. Read the rest at the original. Read the full README ↗