For a product like this, security isn’t a feature. It’s the product.
You're trusting us with the documents that prove who you are. Here is exactly how that trust is engineered — in plain language.
Encrypted, everywhere
In transit (TLS) and at rest, with no exceptions. Documents are served only through short-lived, signed links — nothing guessable, nothing public.
Your vault is yours alone
Hard tenant isolation at the data layer, not a cosmetic filter. No other user, and no casual insider, can reach your documents.
Two factors from day one
Password plus a second factor on every account — because a leaked password should never equal a lost identity.
Everything security-relevant is logged
Sign-ins, shares created, shares opened, deletions — a full audit trail. The same discipline behind the access log we give you.
Built to UK GDPR standards
We're a UK-registered company. Data minimisation, a clear lawful basis, export on request — and when you delete, we genuinely erase.
Never lost
Durable, backed-up storage. Soft-delete means an accident is recoverable; hard delete means gone is gone — your choice, deliberately confirmed.
Data residencyWe’ll publish our hosting regions plainly before launch — where your documents physically live matters, and you deserve to know.
Built like a vault, because it is one.
Get in before everyone else.
We’re building now and opening access in stages ahead of launch. Leave your email and we’ll tell you the moment your vault is ready. Free during early access — simple subscription at launch, announced before you ever pay.