Privacy by design
Only you hold the key.
DigiSafe encrypts every page on your own device before it is stored. What reaches our servers is a locked copy, and the key that opens it is made from your PIN and your password.
DigiSafe is end-to-end encrypted. Documents are locked with AES-256-GCM on your device, your PIN never reaches our servers, and even the names of your folders are encrypted. We store a copy we cannot open.
Privacy by design
Every paper lands in one safe place.
Encrypted on your phone the moment it's saved. Only you hold the key.
Encryption
AES-256-GCM, applied in your browser or app before anything is stored
Your key
Made from your PIN and your account password, on your device
What we store
A locked copy of your documents, and a locked copy of your key
What we can read
Your name, your email and when you signed up. Not your documents
Share links
Carry their own key in the link. Our server never sees it
Family folders
End-to-end encrypted, with a security code you can compare
If you forget both
Nobody can open your documents, including us
Encrypted before it leaves your hand
When you scan or import a document, it is encrypted on your own device with AES-256-GCM and only then saved and backed up. There is no moment when a readable copy sits on our servers, because a readable copy never reaches them.
Your PIN never reaches us
Your PIN is used on your device to unlock the key that opens your vault. It is not sent to us, not stored by us, and not recoverable by us. That is also why our support team can never open your documents for you, however politely you ask.
Names and sizes are hidden too
Folder names, document names, page counts and file sizes are encrypted as well, and folder identifiers are hashed. A server that cannot tell an Aadhaar card from a shopping list is a server that leaks very little if it is ever breached.
Sharing without handing over the keys
A share link contains its own key. Our server holds the locked file, the link holds the way in, and you can stop it at any time. A family folder works the same way: the key is shared with the people you invite, and a security code lets you check that nobody swapped it.
What we can see
We hold your name, your email address, when you joined and which devices are signed in, because an account needs those things. We cannot see what you keep, what it is called or how many pages it has.
The honest trade
Real end-to-end encryption means the recovery options are yours alone. Forget your PIN and your password can reset it. Forget both and the documents stay locked forever. That is the price of nobody else being able to open them, and it is the right trade for papers like these.
Questions people ask
Can DigiSafe staff read my documents?+
No. Documents are encrypted on your device before they are stored, and the key is made from your PIN and password. We hold a locked copy we cannot open.
What encryption does DigiSafe use?+
AES-256-GCM, applied in your browser or app before anything is saved or uploaded.
What happens if your servers are hacked?+
An attacker would get encrypted files along with encrypted names and folder identifiers. Without your PIN and password, that is noise.
Can I check that a family folder was not tampered with?+
Yes. Each shared folder has a security code. Compare it with the other person to confirm you both hold the same key.
What if I forget my PIN?+
Reset it with your account password. Your documents stay safe. If you forget both, nobody can open them, including us.
Keep them somewhere only you can open.
Install DigiSafe free, and put your first document behind your own key.