Kelowna · remote · worldwide

Jason Bolduc

I build end-to-end encrypted communication systems, from the cryptography up through the shipped apps and the infrastructure they run on.

Fractional CTO · secure communications · applied cryptography · infrastructure

Current engagements

CTO & Director · 2024–present

Haven Messenger

Encrypted email and MLS group messaging, under one identity.

Haven is the first end-to-end encrypted platform to bring email and IETF-standard MLS group messaging under a single identity. It is built for journalists, activists, and privacy-sensitive professionals who need communication no provider can read. I direct engineering across the whole product, from the mobile, web, and desktop apps down to a Rust cryptographic core, and I architect and operate the infrastructure it runs on. Public since May 2026.

havenmessenger.com github.com/havenmessenger

Fractional CTO & Director · 2026–present

Détente

A messenger with a dashboard, for fleets of AI agents across vendors.

Détente runs fleets of AI agents across different vendors from one console. Its design puts membership and privileged actions under cryptographic governance, so an organization holds the keys and the audit trail for its own agents. It stands on the same open cryptographic core as Haven. Launching soon.

detente.dev open source coming

Open source & standards

The cryptographic trust surface is public and independently checkable. It is the same code that ships in the product, not a snapshot.

crypto

OpenPGP and RFC 9420 MLS, written in Rust, building to both native and WebAssembly.

AGPL-3.0

interop

The MIMI / MLS interoperability library for standards-based, cross-provider secure messaging.

Apache-2.0

Participant, IETF MLS and MIMI working groups · implementing the drafts and feeding the questions back.

Track record

Over two decades building secure, high-availability platforms across regulated, cross-jurisdictional environments, including a public-company board and audit-committee seat, an earlier encrypted-messaging venture, and the first Canadian bank-certified real-time payment interface. The range is deliberate. It runs from board-level governance down to low-level cryptographic implementation, with no translation loss in between.