For a product like this, security isn’t a feature. It’s the product.
You're trusting us with the documents that prove who you are. Here is exactly how that trust is engineered — in plain language.
Encrypted, everywhere
In transit (TLS) and at rest, with no exceptions. Documents are served only through short-lived, signed links — nothing guessable, nothing public.
Your vault is yours alone
Hard tenant isolation at the data layer, not a cosmetic filter. No other user, and no casual insider, can reach your documents.
Two factors from day one
Password plus a second factor on every account — because a leaked password should never equal a lost identity.
Everything security-relevant is logged
Sign-ins, shares created, shares opened, deletions — a full audit trail. The same discipline behind the access log we give you.
Built to UK GDPR standards
We're a UK-registered company. Data minimisation, a clear lawful basis, export on request — and when you delete, we genuinely erase.
Never lost
Durable, backed-up storage. Soft-delete means an accident is recoverable; hard delete means gone is gone — your choice, deliberately confirmed.
Data residencyWe’ll publish our hosting regions plainly before launch — where your documents physically live matters, and you deserve to know.
Built like a vault, because it is one.
Everything that proves who you are — in one pocket, always valid.
Free trial · card required · cancel any time before it ends and you pay nothing