Does using CarrierPony satisfy my confidentiality obligations?

That judgment is yours and your bar's — no app can make it for you. What CarrierPony provides is the strong technical layer: end-to-end encryption, signed integrity, verified identity, and minimal server-side existence for the communication.

What about my duty to preserve records?

Messages live on the devices, not on a server, so retention is under your control like any client file. If your practice requires archiving, export and store what you must — the relay was never a copy you could rely on anyway.

Can I send case documents?

Yes — files up to 50 MB travel encrypted and signed. The signature means the client can prove the document arrived exactly as you sent it, and vice versa.

// for / attorneys

Privileged in law. Sealed in fact.

Privilege protects a conversation in court; it doesn't encrypt it in transit. Email leaks headers and lives forever on providers' servers. CarrierPony gives attorney–client communication the technical seal the legal one assumes.

The gap between privilege and practice

Most privileged communication still travels as ordinary email or texts: readable by providers, archived indefinitely, with metadata announcing exactly who is talking to which lawyer and when. The conversation may be legally protected, but technically it is spread across infrastructure neither party controls.

What CarrierPony changes

Sealed end to end. Messages and documents are encrypted on your device and decrypted on the client's. The relay in between holds ciphertext briefly and deletes it on delivery.
Integrity you can point to. Every message and file carries the sender's signature — what was received is provably what was sent, unaltered.
Verified identity. Pair with the client at the first meeting, compare the safety number, and the channel is confirmed to be exactly the two of you.
No third-party record of the relationship. No accounts means no provider-side ledger of client communications to breach or compel.
Documents included. Drafts, exhibits, signed PDFs — anything to 50 MB, in a dedicated Files tab on both ends.

Honest limits

CarrierPony secures transit and minimizes server-side existence; it does not manage retention obligations, conflicts, or matter files — your practice management stays your practice management. Both parties need the app on an iPhone. And the endpoint is the boundary: a client's compromised phone is outside any messenger's power.

A sensible workflow

Pair with clients at intake, in person, and verify the safety number together — it takes a minute and makes a good impression.
Lock the app behind Face ID on a device that also carries your practice email.
Export anything your retention policy requires into your matter file; treat the messenger as the channel, not the archive.

Get CarrierPony

Free private messaging and file transfer for iPhone. No accounts, no tracking, no phone numbers.

In App Review — Notify me at launch