Four layers around the data.
Encryption at rest and in transit, company-by-company membership checks on the server, and an audit trail of key actions. The platform was built around the handling requirements for material non-public information rather than retrofitted to them.
What this module does, end to end.
Layer 1. Company Separation
Requests are checked on the server against the signed-in person's membership in that company, and database rules limit what a signed-in browser can read directly.
Layer 2. Encryption
Data is encrypted at rest by our database and file storage provider (AES-256) and in transit over TLS.
Layer 3. AI Services
AI features run through business AI services from Google and Anthropic.
Layer 4. Audit Trail
Key actions, such as filing marks, approvals and changes to governance records, are recorded with who did them and when. Deleted items go to a trash for 30 days before they are purged.
Transport Security
TLS 1.3 in transit. CSP, CORS, HSTS headers.
Post-Quantum Hybrid Mode
Post-quantum hybrid key exchange (ML-KEM plus classical) is on our security roadmap. Ask us for its current status.
See it in production.
Early-access program by invitation. Onboarding in minutes. Your Vault is live the moment your ticker is recognized.