Sanctuary positions itself as “Privacy-First Communication Infrastructure.” It is not a conventional email or SMS platform, but a multi-channel IM and operations gateway for sensitive organizations. Its core idea is to unify entry points such as Signal, Telegram, and WebChat into a self-hosted system, then layer on AI workflows, membership management, order processing, and fulfillment notifications. The site explicitly emphasizes that customer data remains on the organization’s own servers, making it suitable for groups with strong data sovereignty requirements.
In terms of channels, the currently available options are Signal, Telegram, and WebChat. Signal is classified as the Sacred tier, with end-to-end encryption and a stated 3-second response time; WebChat uses TLS encryption; Telegram uses server-side encryption. WhatsApp, Discord, and Matrix are still marked as NEXT. The system normalizes messages from different platforms into a unified format, then uses n8n routing, AI processing, and database workflows to generate responses. It also provides operational features such as a website chat widget, tokenized one-time order links, membership credits, renewal reminders, shipping labels, and logistics notifications.
Pricing is quote-based, with no public unit pricing or packages. The site says quotes are based on organizational needs, compliance requirements, and technical environment, covering one-time deployment, monthly support/hosting assistance, as well as workflow and branding customization. For payments, the order flow can accept BTC, ETH, and bank transfers, and can also integrate payment processors. On the fulfillment side, Shippo/Karrio integrations are mentioned. Since API documentation, SLA, delivery rates, and throughput metrics are not disclosed, a commercial evaluation would require further discussion.
Sanctuary’s strength lies in its well-articulated privacy architecture: self-hosting, zero-knowledge design, no message content written to disk, PGP encryption at rest, pseudonymization, deletion of PII 7 days after fulfillment, and tiered 7/14/30-day killswitches. Each deployment also includes a Data Sovereignty Protocol, making it easier to explain data retention and destruction rules to members. However, the site does not list formal certifications such as GDPR, HIPAA, or SOC 2, nor does it specify regional coverage. Other drawbacks include opaque pricing, a limited number of fully available channels, and the operational burden that comes with self-hosting.
Sanctuary is better suited to high-trust scenarios such as legal services, financial advisory, health and healing practices, journalism initiatives, and private membership organizations—especially teams looking to replace centralized tools such as Intercom, Mailchimp, and Shopify. The site does not provide information about access from China. Given that Signal and Telegram often face accessibility uncertainty in mainland China, deployment should include an assessment of network connectivity, member usage habits, and alternative payment options. If the main requirement is reaching users through domestic SMS, email, or the WeChat ecosystem, local cloud communications providers, WeCom, or compliant email services should be compared first.
⚠ This review is compiled from public sources and does not constitute a purchase recommendation. Verify all facts on the vendor's official site. Verify on sanctuary.is official site.
sanctuary.is is an Unknown Comms & Email provider. TG4G tracks its product information, an overall rating of 7.0/10, and a China-accessibility score of Workable. Click "Visit Official Site" to reach sanctuary.is directly.