Madar is engineered around strict data minimization and cryptographic isolation between personal and institutional vaults.

In Madar Personal, direct messages, voice notes, and media attachments are encrypted end-to-end on the sender's device using X3DH and Double Ratchet before transmission.

Phone number discovery is disabled by default (allow_phone_discovery = false) and uses HMAC-SHA256 blinded hashes when opted in.

In self-hosted Madar Workspace deployments, the organization controls its own PostgreSQL database, object storage, retention policies, and transparent governance disclosure banner.

Selective workspace wipe deletes only the targeted institutional vault database and keys, leaving the user's personal vault untouched.