Encrypted vault
LiveAES-256 encryption at rest, TLS 1.2 or later in transit, stored in AWS ap-south-1 (Mumbai, India).
- ✓AES-256 server-side encryption at rest; TLS 1.2 or later in transit
- ✓Documents, exports and backups stored in AWS ap-south-1 (Mumbai, India)
- ✓A customer-managed KMS key where the deployment configures one
- ✓Self-hosted deployments keep data on your own infrastructure
What it is.
Uploaded documents, data exports and database backups are stored in Amazon S3 in the AWS ap-south-1 region (Mumbai, India), written with server-side encryption at rest (AES-256; a customer-managed KMS key where the deployment configures one). All traffic is encrypted in transit with TLS 1.2 or later. There is no per-organisation region routing on the hosted service; a self-hosted deployment keeps its data wherever you run it.
Document content is also transmitted to the AI sub-processors listed in our DPA — model inference, embeddings and parsing, located in the United States — to perform the analysis you request. India holds no EU or UK adequacy decision, so EU/UK customers should read the transfer terms in the DPA before uploading personal data.
Three steps.
End to end.
Drag a file into your vault. Every upload passes the same accept list and virus scan.
Objects are written to storage in AWS ap-south-1 with server-side AES-256 encryption.
The storage region is stated rather than implied, and the sub-processors that receive document content are named in the DPA.
What you get.
- ✓AES-256 server-side encryption at rest; TLS 1.2 or later in transit
- ✓Documents, exports and backups stored in AWS ap-south-1 (Mumbai, India)
- ✓A customer-managed KMS key where the deployment configures one
- ✓Self-hosted deployments keep data on your own infrastructure
- ✓Sub-processors that receive document content are named in the DPA
Quick answers.
Uploaded documents, data exports and database backups are stored in AWS ap-south-1 (Mumbai, India). Document content is also transmitted to the AI sub-processors listed in our DPA (model inference, embeddings, parsing — located in the United States) to perform the analysis you request. India holds no EU or UK adequacy decision, so EU/UK customers should review the transfer terms in the DPA before uploading personal data.
Not on the hosted service — there is no per-organisation region routing. A self-hosted deployment runs on infrastructure you choose.
More in Vault & Document Management.
Per-document share links with an expiry, a view cap, granular permissions, and recipient-tagged watermarking.
Chain successive drafts of a contract together, and compare any two clause by clause.
Every upload is a document with a category — agreement, evidence, court order, correspondence, identity — and the category decides what runs. Nothing is analysed unless you ask.
A contracts dashboard where every figure states its basis, and a request desk where triage is decided by your rules, not a model.