Communications options

Summary

We try to make it as easy as possible for you to keep in touch with us, and we offer numerous ways to do so.

In addition to the normal email and phone options, we offer various mechanisms with enhanced security. We cannot (and do not) promise that any option is 100% secure, but hopefully you will find something suitable for your needs / threat model.

If you have different requirements, please let us know.

We offer:

We do not offer:

Encrypted email

Most people communicate with us by email. And that's absolutely fine.

If you want to get in touch with us for the first time, email is the only option we offer. We're happy to arrange a time to talk with you if, after reading your initial email, it looks as if we might be able to help you.

Our mail server supports — but does not force — TLS for connections with other mail servers. This means that, as long as your mail server supports it, email from your server to ours, and vice versa, will be encrypted in transit.

Please also encrypt it end-to-end, if you can. Here is our PGP/GPG key for our published email address, contact@decoded.legal. We also offer PGP for our personal email addresses, and you can find our keys on keys.openpgp.org, and via Web Key Directory.

By default, we digitally sign all email that we send. If your mail server does not like this and you cannot persuade someone to fix it, let us know, and we can try to remember to remove the signature before we email you.

Unencrypted phone calls

We can give you a phone number to call. It'll be a geographic number but it doesn't matter where in the world we are: ring it during a reasonable hour in the UK, and it will ring us.

These calls are carried by SIP, and they are unencrypted between our PBX and our carrier. As such, someone intercepting the Internet connection between us and them could intercept these calls. We do not know what, if any, encryption you might have in place between your phone / phone system / carrier. We suggest that this is suitable only for less sensitive communications.

It is trivial to make a phone call look like it is coming from any number you want. If you receive a call which presents one of our numbers, we cannot guarantee it is from us: if you are even slightly suspicious, please verify the call. You can do this every time we ring you, and we will not get fed up of it.

If you can, please schedule the call with us first. If we can answer an unscheduled call, we will, but scheduled calls are always preferred. There is no voicemail facility, so you cannot leave a message.

If you are based outside the UK and want to use a normal unencrypted PSTN phone call, and you plan on calling us a lot, let us know, as we may be able to set up a phone number from your country's numbering plan, so that your calls to us are cheaper or even free.

We record calls to these numbers.

End-to-end encrypted audio and video

We use the Matrix open standard for end-to-end encrypted communications. This is primarily audio and video, but you can also use it for end-to-end encrypted instant messaging (please use this sparingly!), and for file transfers.

Our matrix identities are in our email signatures. We use the :decoded.legal namespace.

You will need to have an account on a matrix-compatible system. We don't offer technical support, but let us know if you need pointing in the right direction.

There is no voicemail facility, and we do not record these calls.

We also offer Signal.

Easier to use encrypted video conferencing

We appreciate that the requirement of an account on a matrix-compatible system is not for everyone, and we offer an alternative video conferencing platform, which does not have this requirement. (You can use this for audio-only too, by not switching on your camera.)

You do not need to register for an account, or install any software as long as you have a reasonably modern web browser capable of doing WebRTC.

Our system offers transmission encryption, meaning that the connection between your browser and our server is encrypted by TLS. It is not properly end-to-end encrypted, but it's "sort of" end-to-end encrypted, in the sense that the video server is under our sole control, but traffic is still decrypted by the server and re-encrypted before it is sent onwards.

We can probably use your choice of video conferencing platform too.

(Please don't expect someone wearing a suit and tie. In fact, if someone claims to be from decoded.legal and they are wearing a suit and tie, please treat them with extreme suspicion.)

Encrypted file transfers

If we need to send you (or receive from you) files which are too sensitive for non-PGP'd email or are too big to transfer sensibly by email, we offer a simple, end-to-end encrypted, file transfer tool. You do not need to install any software or register for an account.

If we are sending a file to you, we will use your email address to send you the details of how to download the file, and we will need a second way of communicating with you to send you the passphrase. If we are receiving a file from you, we just need some way of sending you the details — it is still end-to-end encrypted, but we handle the credentials, so this is invisible to you.

We are also happy to use OnionShare for "real time" transfers.

Fax / pigeon / avian carrier / semaphore / post / visits to our office

No. We do have a postal address, but we'd rather you didn't use it. We also have some trees, but we'd rather your pigeons didn't use them either. We do not offer semaphore, as that just raises red flags.

Hire decoded.legal now!

We offer a range of communications options. Many of these are encrypted, and some offer end-to-end encryption. Please use the method which best suits your needs.

email  Email

Please contact us via email:

contact@decoded.legal

Please encrypt it end-to-end, if you can. Here is our PGP/GPG key. You can also find our keys on keys.openpgp.org, and via Web Key Directory.

phone Prefer to talk?

Drop us an email telling us a bit about you and what help you need. If we're likely to be a good fit for you, we're more than happy to take it from there by audio or video.

We offer both unencrypted and encrypted audio/video calls.

We record "normal" phone calls.

We'll never spam you or sell your information. Ever. More info here.

Authorised Law Firm badge

View our Authorised Law Firm digital badge here. The badge is hosted by a third party (which purports to act as a processor of the Solicitors Regulation Authority). They used to load Google Analytics automatically, but the SRA has said that it is not going to do so "at the moment". As we cannot be sure when they might start to use it again, we suggest that you only view our badge if you are willing to send your IP address to the third party, and Google (to load a jQuery resource), and potentially for them to run Google Analytics JavaScript on your device. Here is the third party's privacy notice.

Other bits

decoded.legal is:

  • authorised and regulated by the Solicitors Regulation Authority (626329)
  • subject to the SRA's code of conduct
  • a company registered in England and Wales (9856909) with a registered office address of Farthings, Stable Court, Love Lane, Newbury, Berkshire, RG14 2DT
  • registered as a data controller with the Information Commissioner's Office (ZA152364)
  • registered for VAT in England and Wales (229 6427 86)