A private vault for the receipts, IDs, and paperwork that otherwise live scattered in email.
How your documents are protected
Kept apart by account
The database is set so one signed-in person can never read another person’s documents.
Encrypted before storage
Each file is encrypted on its own before it is written to storage — not left as a readable original.
Scanned on the way in
Uploads are checked for malware before they are processed or filed.
Opened through short-lived links
When you view a file, it is served through a brief, signed link — never a permanent public address.
Sensitive actions are recorded
Moves between folders and changes to your forwarding address are logged as account activity.
What it does
- A unique forwarding address of your own, so you can send documents in by email.
- Automatic filing into categories, with a short AI summary of each document.
- Search across filenames and those summaries, not just one folder at a time.
- Optional offline copies — only the documents you choose to save on this device.
For the curious — architecture already in this build
- — Row-level security at the database: policies scoped to the signed-in user, not application-only filters.
- — Envelope encryption per file (a unique data key wrapped by a master key), not one shared key for every object.
- — Idempotent, queue-based processing in a long-running worker — not serverless jobs that retry unsafely.
- — Classification via structured model output (vendor, amount, date, category), not free-text parsing.