A workspace where every file is accountable.
The product surface, in detail. Files, sharing, permissions, audit, approvals, conversation, and the apps you and your team use to live in it.
Files, folders, projects — modèled like your team works.
Drag-and-drop, type-to-search, keyboard navigation, multi-select with bulk actions. Side-by-side preview for PDFs, CAD, images, video — everything renders inside the encrypted boundary.
- Smart search. across filenames, contents (where allowed by encryption mode), and metadata. Saved searches live in your sidebar.
- Bulk actions. move, tag, re-encrypt, change owner — 10,000 files at a time.
- Pinned + favorites. per-user, per-team, syncs across devices.
Roles that fit your org. Folders that respect them.
Map titles to capabilities. Then override anywhere a folder deserves stricter or looser rules — without losing the global default.
- Five built-in roles. plus unlimited custom roles per workspace.
- Capability granularity. View, Download, Upload, Delete, Share, Admin — independently togglable.
- Approval-gated capabilities. mark Download or Share as 'requires approval' for any role.
- Folder overrides. an Admin can become a Viewer inside one folder. Inheritance is explicit and visible.
Every event. Signed. Forever.
An append-only journal of every file action and security event, with HSM-attested signatures. Exportable as CSV, stream-able to your SIEM, queryable from the in-app explorer.
- Filter by anything. principal, action, target, IP, time range, geo.
- Webhook + SIEM. native Splunk, Datadog, and Elastic integrations; webhook for the rest.
- CSV export. tamper-evident with an HMAC trailer.
- Retention. forever on Business+; configurable for industry-specific retention windows.
A second pair of eyes — at machine speed.
Mark a folder "sensitive," and any outbound share routes through one or two approvers of your choice. Reviewers see the file, the recipient, and the reason — and can approve in a click.
- Inline review. approvers see the actual file content, not just metadata.
- SLA timers. reviewer SLAs visible to requesters; auto-escalate on miss.
- M-of-N policies. require 2-of-3 senior partners for any share leaving the firm.
- Slack / Teams / Email. approvals work from the channel reviewers already live in.
Conversation that stays with the file.
A focused chat inside every folder and every file. Comments persist with the version they were posted on. Mentions trigger end-to-end encrypted notifications on every device.
- Threads pinned to lines. PDFs, contracts, drawings — click a region to start a thread.
- Decisions, not noise. mark a comment as a decision; it surfaces in the file's decision log.
- Push notifications. desktop + mobile, batched by sensitivity, never leaking content.
- Encrypted at rest. comments use the same key envelope as their file.
Same workspace on every screen.
Native clients for everything you use. The web client is fully featured — apps just feel better, sync offline, and integrate with the OS.
Try every feature for 30 days, free.
Full access. Cancel anytime before billing.