Field Notes

entity

Phoenix R&D

Phoenix R&D is a German company (GmbH) that builds open-source, standards-based secure-communication software. It describes itself as a public-interest developer working on encryption for at-risk users, and it is the vault’s clearest example of a grant-funded, non-advertising business model for private messaging.

Standing in the MLS ecosystem

Phoenix R&D’s distinguishing asset is authorship, not scale. Raphael Robert of Phoenix R&D is a listed author of RFC 9420, the Messaging Layer Security standard, alongside authors from Cisco, Inria and Mozilla, Meta, and Oxford. The company co-maintains OpenMLS, the Rust implementation of that standard, together with Cryspen, and it ships Air, its own consumer messenger built on the stack.

This places Phoenix R&D at three layers of the same technology at once: the specification, a reference implementation, and a shipped product. The chain is a genuine credibility signal, but it does not by itself establish Air’s maturity as a deployed system, which the Secure and decentralized communication stacks comparison treats separately.

Business model

The company’s self-description names three activity streams: software development, research and consulting, and community and industry partnership aimed at strengthening the secure-messaging ecosystem around shared standards and open-source tools. Its stated focus areas are secure messaging, post-quantum cryptography, and metadata minimization.

Rather than advertising or venture capital, Phoenix R&D and its technology are financed by public-interest grants. The Open Technology Fund supported “Project Phoenix” to build an MLS-complementing stack that minimizes infrastructure metadata, and to develop a messaging service for at-risk users.1 Air’s privacy page additionally credits NLnet, the Prototype Fund, and the Sovereign Tech Fund, and the SRLabs audit of OpenMLS was sponsored by the Sovereign Tech Agency. These are the recurring European public-interest software funders, which is consistent with a social-impact rather than a commercial-scale model.

Why it is in the wiki

Phoenix R&D is a supplier-side data point for the venture’s messaging analysis. It demonstrates that a credible privacy messenger can be built on audited open standards by the standard’s own authors, and that public grants can fund such work without an advertising model. It also illustrates the limit the vault repeatedly returns to: strong protocol provenance is necessary but not sufficient, and a young deployed product still has to earn independent scrutiny. Signal remains the mature-usability comparator, and Air carries the deployed-system caveats.


  1. The Open Technology Fund Project Phoenix page describes funding for an MLS-complementing, metadata-minimizing stack and a messaging service for at-risk users. 

Built on 4 sources (4 external).

Working out connections…