Swiss company · GDPR-compliant

Security from the ground up — not as an afterthought.

WinDesk has been designed as a security product from day one: peer-to-peer data flow, end-to-end encryption, host sign-in bound to the security chip, Swiss hosting. No cloud bridge, no CLOUD Act, no need to trust us — the cryptography ensures it.

Security layers

End-to-end encryption

Each session uses an ephemeral AES-256-GCM key negotiated via ECDH (P-256). The key is discarded after the session — even we cannot decrypt content afterwards.

Sign-in bound to the security chip

The host’s sign-in is bound to the device’s security chip where available (TPM on Windows and Linux, Secure Enclave on Mac), and every pairing is additionally tied to a hardware fingerprint of the host.

Peer-to-peer data flow

Screen, audio and input flow directly between client and host. Our infrastructure never sees them — only the connection setup (signaling) passes through our Swiss server, and it carries no screen content. The AES key is never exchanged with the server: both ends derive it from the exchanged public keys via ECDH, so it exists only at the two endpoints. There is no media relay or TURN fallback by design: in the rare case where both endpoints sit behind symmetric NAT, a direct connection may not be established — but your screen data never leaves the peer-to-peer path.

Two-factor mandatory for admin roles

TOTP or passkey (WebAuthn / FIDO2). Administrators and all accounts with Pro set up two-factor authentication right after their first login. Sensitive actions (revoking a device, changing a role, cancelling a subscription) require re-confirmation with a password or passkey, valid for 10 minutes.

Audit trail & session logs

Sessions, new and revoked pairings and role changes are logged. Filter the session history by host and date.

Hosting in Switzerland

Servers in certified Swiss data centres, no US cloud. Swiss GmbH with no US parent — the CLOUD Act does not apply.

Compliance & standards

revFADP / GDPR

The Swiss revFADP (revised Federal Act on Data Protection) is largely equivalent to the GDPR. Our privacy policy documents processing in accordance with Art. 13 GDPR and Art. 19 revFADP.

GDPR Art. 32(1)(a)

Encryption in line with the state of the art: AES-256-GCM, ECDH P-256, perfect forward secrecy per session.

Code-signing certificates

Windows: DigiCert EV code-signing via SafeNet eToken. macOS: Apple Developer ID + Apple notarisation. Linux: SHA-256 checksums for every file, signed updates.

External audit

There is none. WinDesk has not been externally audited or penetration-tested, and holds no ISO 27001 certification. We name no date for it while none is fixed. What is implemented is set out on this page — readable rather than promised.

Protection against remote-support scams

Remote-desktop software is misused in an underground economy for tech-support scams, banking hijacks, romance scams and findom operations — AnyDesk has been a documented target for years. WinDesk is technically hardened against these use cases:

  • Permanently visible session indicator. While someone is connected, the host shows a “Remote support active” notice at the edge of the screen with the connection duration. It can be collapsed but not hidden.
  • Ending the session at any time. The person at the host ends the session at any time via the notice at the edge of the screen.
  • Country check and IP block. An unattended connection from a country that is not approved for the host is blocked, and the owner receives an email to approve it. Repeated failed sign-ins block the IP address.

Plus: Lightnet Multimedia GmbH refers abuse to the criminal authorities — internationally as well, via the Budapest Convention and bilateral mutual legal assistance treaties. If you are a victim of a remote-support scam or want to report abuse: Report abuse + victim help page.

Frequently asked security questions

Can WinDesk staff read sessions?

No. End-to-end encryption technically ensures that session content is unreadable to us. We only see metadata (who, when, how long, which IP) for billing and security auditing.

Does screen data ever pass through your server?

No. WinDesk uses no media relay. Screen, audio and input flow only peer-to-peer between the two endpoints. Only the connection setup (signaling) passes through our Swiss server, and it carries no screen content.

Is WinDesk subject to the US CLOUD Act?

No. Lightnet Multimedia GmbH is a Swiss limited liability company with its registered office in Graben (CH-3376). No US parent, all servers in Switzerland and Germany/Finland. The CLOUD Act does not apply.

How are device tokens stored?

With the protection mechanisms of the operating system (on Windows DPAPI, in service mode the TPM; on Linux TPM 2.0 or the system keyring). The host’s sign-in itself is bound to the security chip where available.

Can you bypass my 2FA codes?

No. TOTP runs client-side, passkeys are hardware-bound. Without the second factor neither you nor we can get past login. If both factors are lost (password + auth device), recovery is only granted after identity verification.

Security without a leap of faith

Free plan with no account, no credit card. AES-256-GCM applies to every session — including Free-plan sessions.

Sign up free Download now