As simple as a consumer messaging app — but yours. Every employee writes in their own language and reads in theirs: messages are translated automatically. On your Android phone, your Windows PC and your Linux PC, the same conversations follow you. Encryption keys never leave the devices, and nothing goes through an outside cloud.
CelluleBot is not a separate product: it is the Cellule-PRO function on your employees' computers and phones. It talks only to your Cellule-PRO pool, installed in your company — without Cellule-PRO, there is no CelluleBot. Each device is paired by your administrator and can be revoked at any time, and every feature is a setting in the admin dashboard.
Answers drawn from the knowledge bases your administrator opens to employees, with the cited passages. Processed by your pool; the question and the answer are not kept.
Conversations end-to-end encrypted between devices, translated automatically between languages — detailed below.
Business modules switched on by your administrator: road transport today, engineering (Cellule Mission) under construction.
A Polish driver and a French operations team, an Italian site and a Spanish supplier: nobody needs to change language. The device detects the language of the message; if it differs from the reader's system language, the message is shown translated — with the original one click away.
The language of the message is detected on the device and compared with the reader's system language. Same language, very short text or emojis: nothing is sent, nothing is translated.
When a translation is needed, the text is processed by your company's server, for the time of the calculation, without being kept, and never passed on to another server. The translation is then stored encrypted on the device.
A “Do not translate” box lets the sender keep a message on the devices only. The administrator can also turn translation off for the whole company.
Each computer and each phone creates its own keys (Ed25519 for signing, X25519 for encryption). The private key stays in the operating system's keychain — never on the server.
Every message gets its own random key (AES-256-GCM), sealed separately for each recipient device with HPKE (RFC 9180). The whole envelope is signed by the sending device.
Attached files are encrypted on the device before sending, and stored on your server as opaque data. Sending files is an option your administrator turns on.
Messages are stored and relayed by the Cellule-PRO server installed in your company — not by a provider's cloud.
On Android, the app keeps its own connection to your server and decrypts messages on the phone. No Google or Firebase notification service is involved.
A safety number to compare with each contact, a visible warning when a contact gets a new device or key, a warning when a device is added to your own account, and immediate revocation of a lost device.
The same app on employees' computers and phones.
Speak instead of typing: the voice is transcribed by your company's server without being kept, then the text is encrypted on the device before sending.
Write @Cellule: the assistant reads the latest messages of the conversation and answers. They are processed by your server, without being kept, and the answer arrives encrypted like any message.
On Android, read and reply directly from the notification.
Real screens of CelluleBot on a demonstration server.
Start a conversation on your Android phone on the road, carry on at the office on Windows or at home on Linux: every new message reaches all your devices at the same moment, end-to-end encrypted.
A key specific to your account moves from one of your devices to another only after your confirmation, with a code shown on both screens. Your server never knows it and still reads nothing: it stays end-to-end encrypted.
Messages received after a device is paired reach it automatically. Making your earlier history available on a new device relies on account sync, turned on by your administrator.
Account sync is turned on by the administrator (off by default). Without it, a new device only reads messages received after it was paired. A lost device gives access to what the account synced: remove it at once.
A stolen and unlocked device can read the history it holds. The answer today: revoke it immediately from the administration. Forward secrecy is planned for the next version (MLS, RFC 9420).
Messages are kept 365 days by default; the administrator chooses the duration. Messaging, translation and files are each a switch in the admin dashboard — messaging is off until the administrator turns it on.
CelluleBot comes with Cellule-PRO, installed on your own servers.