SanctuaryDesk

Human-rights, harm-reduction and politically exposed organizations may serve people who cannot safely place sensitive requests in a conventional vendor-hosted ticket database. SanctuaryDesk packages an existing encrypted event protocol into an organization-controlled support queue. The organization chooses relays, owns keys and policies, and gives agents a console for assignment, status, replies and internal notes. The supplied research confirms a small open implementation of encrypted support-ticket events and funding precedent for adjacent privacy tools, but no managed helpdesk using this architecture. Messaging systems remain alternatives, and the implementation's limited adoption makes security maturity a critical unknown. End-to-end encryption protects content only within a defined threat model; endpoints, metadata, relay availability, key handling and recipient behavior remain risks. Request creation, delivery to a relay, agent receipt, identity or pseudonym binding, assignment, reply, status, escalation, service action and beneficiary outcome remain separate. The product can reduce vendor custody and central-database exposure. It cannot guarantee anonymity, availability or safety, replace emergency services, recover lost keys by assumption or call a managed deployment zero knowledge without independent architecture and security verification.

A human-rights, harm-reduction or politically exposed organization with a documented threat model, security owner and trained support team.