What we see vs. what you see
Trust, line by line.
Every row of data in your vault has a user-side view and a server-side view. The server-side column is shorter than the user-side column. By design.
What kind of data
What you see
What we see
Document content
Plaintext on your device, while unlocked.
Encrypted XChaCha20-Poly1305 ciphertext we cannot unwrap.
Expiry dates / metadata
Structured fields you can edit and search.
Encrypted blob. We run no server-side processing on your data.
Trusted contact list
Names, emails, permission grants, audit log.
Same encrypted blob. We never see who you invite.
Sharing requests
Read-only, scoped, time-limited, fully revocable.
A token we route. We cannot decrypt the underlying record.
Recovery
A 12-word phrase generated once, saved by you.
Nothing. We never see your recovery phrase.
Audit log
Every view, share, export — exportable as JSON.
Encrypted. We can't read your log.