LLBOX
The problem
Deliveries fail when nobody is home, the driver cannot find the door, or the phone call turns into a negotiation about where to leave the parcel. Customers also do not want to hand their personal number and home address to every marketplace and courier they buy from.
The product
A customer installs an LLBOX, a smart box with its own Saudi phone number and keypad, and registers that number as their delivery address on any e-commerce platform. When a driver arrives they call the box. An AI voice agent built on ElevenLabs answers, converses with the driver over the call or WhatsApp in English, Arabic or Urdu, verifies the delivery, and sends a photo of the box location and a one-time code. The driver types the code into the keypad, the box opens, and the customer is notified. The whole handover happens with no human involvement, which is what LLBOX calls silent delivery. Up to four household members share a box, guests can be issued time-limited codes, and the customer’s real number and address are never spoken aloud.
Under the hood
- The ElevenLabs voice agent calls into a deliberately plain REST contract; the core backend holds no conversation logic, so the box platform and the agent evolve independently.
- Three firmware endpoints are frozen for the life of the boxes in the field, and box claiming is a race-safe conditional update rather than read-then-write.
- Delivery codes are single-use and never expire on a clock, a change made after a 30-minute window started rejecting legitimate late-arriving drivers.
- Refresh tokens are stored as SHA-256 hashes and rotated on every use; replaying a rotated-out token revokes every active session.
Node.js/Express API · React Native (Android) · React/TypeScript admin · PostgreSQL · ElevenLabs voice agent · one Saudi number per box · ESP32 firmware contract