Help & Documentation

Overview

StateNull is a verifiable-records platform — sealed capture, proof requests and independent verification — with encrypted 1:1 calling, built-in device management (MDM/UEM), certificate infrastructure (PKI), and enterprise SSO. There are three planes: the customer portal (self-service, at /portal), the operator console (/b2b/admincenter), and the on-device app.

Get the app

Install from Google Play, or request a secure download link from the customer portal (it is emailed, resumable, tied to your account, and replaced whenever you request a new one). The app is delivered locked & encrypted — sign in with your email + password (or your organisation SSO) to activate it. Organisations using their own EMM (Intune, Jamf, Workspace ONE) can distribute the app + our managed-app-configuration bundle instead — see On-premise / your admin.

Device enrollment

Your administrator generates a one-time enrollment link (Console → Onboarding, or Portal → Enroll a device). Open it on the device to bind it to your organisation. Enrolled devices appear in the operator console under Devices & Users with their owner, certificate state, and compliance. Policies (screen-lock, encryption, camera, kiosk, blocklists) apply automatically.

Single sign-on (SAML)

Operators configure SSO in Console → SSO & Users. Paste your IdP's SSO URL + signing certificate, then hand the IdP these Service Provider values (shown on that page): SP Entity ID, ACS URL, and metadata at https://statenull.com/saml/<org>/metadata. Works with Okta, Entra ID, ADFS, Ping, and Keycloak. Employees are auto-provisioned on first SSO login. Users sign in via Sign in with SSO on the portal.

Secure calling

1:1 video/audio calls are end-to-end secured and relayed over TLS on port 443 (TURN relay-only) so media never traverses arbitrary ports. Open Comms → Calls in the app, pick a contact, and start a call.

Updates & channels

Releases ship on two channels — stable and beta. Each release has a version and notes, and the full history is public at /changelog.

How you get an update depends on how you installed:

• Google Play — Play delivers updates automatically, like any other app. Nothing to do.
• Direct download or managed deployment — the app does not check for updates and will not prompt you. To move to a newer build, request a fresh download link from your account and install it over the top, or your operator re-pushes the build through your EMM. A machine-readable manifest is published at https://statenull.com/api/updates/manifest for that automation.

In-app update checking is not implemented today. We will say so here when it ships — until then, watch /changelog if you install outside Play.

On-premise

Organisations can self-host the whole stack. From the operator console (Deployment) generate a pre-configured bundle: docker-compose.yml + .env (with a generated admin token + your license) + install.sh. Run ./install.sh — one command brings up the edge, control plane, and marketing site and prints your Admin Center URL.

FAQ

Is my data isolated from other organisations? Yes — every tenant has an opaque id and all data access is scoped to your authenticated session.
Can I turn on 2FA? Yes — Portal → Security (authenticator app, email codes, backup codes).
Where are the legal terms? /legal · /privacy · /terms · /responsible-use.

Known issues

Contact support

Use the contact form — no sign-in needed — or email media.supply@statenull.com. Signed-in customers can instead open a ticket from the customer portal → Support to track its status and our responses. For a suspected bug, include your app version and what you were doing.