Remote access, run honestly.
Tenvo is built and maintained by UPDEVTEAM LTD (Cyprus). Self-hostable relay. AGPL-3.0 client licence. TLS with per-device certificates. No surveillance, no vendor lock-in, no fake metrics.
Why we built Tenvo.
Tenvo started from a working remote access protocol: direct connections with a relay as fallback, TLS, a multi-platform Rust core. What we wanted to change was everything around it: the free tier, onboarding and UX polish, and infrastructure that is not shared with everyone, including bad actors who get public servers flagged at firewalls.
Tenvo ships its own infra (id.tenvoai.com + relay.tenvoai.com), its own brand-aligned UI (skeuomorphic instrument-panel, not a tablet app), its own onboarding, and its own tier model.
We're a Cyprus LTD. We're not a Series A startup with a marketing department. Free-tier limits and prices are published, and the people who build Tenvo also answer the email. That's the deal.
Four things this product won't do.
We log session counts and durations on the relay. We don't log your screen.
Direct connections are end-to-end encrypted between the endpoints. Session metadata (start, end, peer IDs, byte volume) is stored in our own database, on our server in Germany, for billing reconciliation and abuse detection. We do not record your screen content.
Free-tier limits are published. They don't shrink without notice.
Free is 30 devices, 1 concurrent session, 5 GB/mo relay. If we have to lower those caps to keep the tier sustainable, the change is announced 90 days ahead and grandfathered for existing accounts.
Updates are opt-in. The installer doesn't side-load anything else.
Auto-update is a Settings → General toggle, off by default until first run prompts. We won't add browser toolbars, redirect search, or bundle 'partner' software. Ever.
Cancel from the same screen you signed up on.
Subscription management lives in Settings → Billing inside the desktop app — open the Stripe-hosted portal to update payment method, see invoices, change plans (Lite ↔ Pro with prorations), or cancel at period end. Cancellations take effect at the end of the current billing period; no surprise charges, no win-back retention loops.
What happened, when.
Tenvo client started under AGPL-3.0
ADR-001 kept the client under AGPL-3.0: the value of Tenvo is in the network and the service around it.
Production rendezvous + relay live on tenvoai.com VPS
Our VPS hosts hbbs (rendezvous) on 21115 and hbbr (relay) on 21117. Each device presents a per-device certificate, and update manifests are Ed25519-signed and verified by the client before install.
Phase A — Supabase magic-link auth
Accounts, devices, subscriptions, sessions audit, ban_list and tier_limits started out in Supabase eu-west-1, with magic-link OTP sign-in — no passwords to lose, no SSO entanglement on day one. In June 2026 all of it moved to our own PostgreSQL on our server in Germany.
macOS .zip signed by Developer ID + notarized by Apple
Signed with UPDEVTEAM LTD's Developer ID Application. notarytool submission Accepted by Apple, stapled. Windows EV cert for SmartScreen comes after Cyprus ROC clearing.
Phase B — Stripe billing (live since 2026-05-07)
Lite $2.99 / Pro $7.99 live in Stripe today. Multi-seat operator billing is in development (not yet shipped — email us if you need it). Stripe Adaptive Pricing for PPP markets where supported.
The boring stuff, on the record.
- Company
- UPDEVTEAM LTD
- Jurisdiction
- Republic of Cyprus (EU member state)
- License
- AGPL-3.0
- Infra
- id.tenvoai.com · relay.tenvoai.com
- Data residency
- Our own PostgreSQL on our server in Germany (EU)
- Version
- v0.16.55
- Contact
- support@tenvoai.com