Threat modelling & cryptographic design
What you protect, from whom, and where the keys live — before the first commit.
Satoshi Ltd. · Software studio · Hong Kong · Since 2020
A small studio that designs, builds and ships software that runs on hardware you control — no account with us, no telemetry, no server of ours in the middle.
Scroll to enter
01 / The drift
Files moved to someone else's computer. Every app started asking for an account, a subscription and a little of your data. That was a design decision — and design decisions can be undone.
02 / The unit
A satoshi can't be split, and it doesn't ask anyone's permission to exist. That is how we want software to feel: privacy, autonomy and sovereignty over your own data, built in rather than promised.
03 / Practice
Discovery · 1 weekDelivery · 6–12 weeksRetainer · ongoing
What you protect, from whom, and where the keys live — before the first commit.
Agents that run on your own infrastructure, with the model provider and the keys you choose.
Storage, sync and offline-first apps for mobile and desktop.
A second pair of eyes on the parts that matter most.
04 / Rules
Our software works without an account with us.
Our software ships no analytics, crash-reporting or tracking SDKs.
No Satoshi server sits between you and your data.
Your data lives in files you hold, ready to back up or take elsewhere.
Our code is public, so anyone can read and review it.
Passphrases, device keys and provider keys stay with you.
05 / Aim
Privacy shouldn't feel like a sacrifice. We want software you control to be the obvious choice: calmer, faster and better made than what it replaces.
“What we don't know can't be subpoenaed, leaked, or sold.” Satoshi Ltd. · Principles
We use what we build
alpi-agent.com arca.satoshi-ltd.com money.satoshi-ltd.com splitpass.satoshi-ltd.com
06 / Engage
Free 30-minute intro. NDAs on request. Signal @satoshiltd if you'd rather not use email.