Straight answers.

DocVault is a document management system that you run on your own servers. It handles the whole life of a document: upload and versions, full-text and OCR search, folders, metadata and numbering, permissions and sharing, approval workflows, electronic and digital signatures, retention, legal hold, DPDP tools and a tamper-evident audit log.

Organisations that have to keep documents under control and prove it: finance and banking, insurance, healthcare, real estate, government, education, manufacturing and IT services. Eleven ready-made sector packs give those industries a head start.

Documents (PDF, Word, Excel, PowerPoint, OpenDocument, text, CSV, email files), images (JPG, PNG, TIFF, WebP, HEIC and more) and archives. Audio and video can be enabled by an admin. Executables, scripts, active HTML/SVG and macro-enabled Office files are always blocked.

The interface is in English today. OCR, which is what makes scanned documents searchable, works in 14 languages, including Hindi and 12 other Indian languages.

There's no separate app. DocVault runs in any modern browser, and annotation supports touch and stylus input.

Wherever you choose: on a server in your data centre or in your own cloud account. It runs as a set of Docker containers on a single host, and your documents and database stay on that host.

2 vCPU with 4 GB RAM is the recommended starting point, with about 30 GB of disk plus space for your documents. With the optional Aadhaar masking service, plan for 8 GB RAM. We'll size it with you based on your users and document volume.

Yes. OCR (and which languages), Office previews, Aadhaar masking, Aadhaar eSign mode and the signature seal are all chosen in one configuration file. A module that's switched off isn't built, isn't run and doesn't appear anywhere in the interface.

Yes, through a reverse proxy: DocVault sits behind your nginx, load balancer or similar, which serves HTTPS with your certificate. That's required before you expose it to the internet, and we'll help you set it up.

DocVault includes backup and restore scripts for both the database and the file storage. A restore asks for explicit confirmation. Your team schedules the backups and copies them off the server according to your own policy.

Not yet. Today's deployment is a single server, and installation and updates need internet access. Offline (air-gapped) installation and multi-server high availability are on our roadmap.

Yes. The platform operator creates sub-accounts, each with its own admins, branding, users and storage allocation from a shared pool. The database keeps each workspace's data separate using row-level security.

Yes. Deep search covers the text inside Word, Excel, PowerPoint, PDF, text, HTML, CSV and OpenDocument files, with quoted phrases, OR and exclusions. With OCR enabled, scanned images and scanned PDFs become searchable too.

English, Hindi, Marathi, Sanskrit, Bengali, Assamese, Gujarati, Punjabi, Odia, Tamil, Telugu, Kannada, Malayalam and Urdu. You can set the language per workspace or per folder.

• The first 20 pages of each scanned PDF are read.
• Indexing runs in the background, so a new scan becomes searchable shortly after upload rather than instantly.
• Clean, well-lit scans give the best results. Screenshots and dark backgrounds read less reliably.

No. Every type of search (live, full-text, tags and metadata) goes through the same permission check. Files you can't open never appear, not even by name.

Yes. Build AND/OR filters on any metadata or system field, save searches to reuse them, and export results to CSV. Fields marked as personal data only allow exact or ends-with matches and are masked in results.

Through roles (Owner, Admin, User, External) and per-folder or per-file permission levels: Previewer, Viewer, Editor, Owner, or a custom set of 17 individual rights. Shares can expire, and no one can share at a higher level than they hold.

Yes, with authenticator apps. It includes recovery codes, protection against code reuse, moving to a new device and admin resets with a recorded reason. Sensitive actions also ask for your password and 2FA again.

Yes, per workspace. You choose the minimum length (8 to 64 characters), which character types are required, how many wrong passwords lock an account (3 to 20) and for how long, and whether passwords expire (up to every 365 days). When a password expires, the user must choose a new one at their next sign-in, after two-factor verification. You can also set how long an idle session lasts before it is signed out. Accounts that sign in through LDAP / Active Directory follow your directory's rules.

The account locks after your policy's number of wrong attempts. While it's locked, sign-in answers exactly as it does for a wrong password, so an attacker can't tell which accounts exist. The account's owner is emailed with the time the lock ends, and can lift it immediately with "Forgot password". Every address is also slowed down after repeated failures.

For a sub-account, the platform operator can reset the owner's two-factor authentication after verifying them. For the main owner, your IT team can restore access with a recovery command on the server. Both actions are recorded in the audit log.

LDAP / Active Directory sign-in is supported today. SAML and OIDC single sign-on are on our roadmap.

Yes. When you burn in a redaction, DocVault creates a new version in which the redacted pages are flattened to images, so the text underneath is removed, not just covered. Those pages lose selectable text as a result.

DocVault blocks executables, scripts and macro-enabled documents, and checks each file's real type. Built-in antivirus scanning is on our roadmap, so we recommend keeping your existing malware scanning in place.

DocVault is software you deploy, so certification applies to your organisation's environment. The product provides the controls and evidence (audit trail, access reviews, retention, legal hold) that auditors look for. For an independent security assessment of a specific deployment, please talk to us.

• Native electronic signature: draw, type or use a saved signature, with multiple signers, a reference on every page, and an audit-trail certificate (IP, method, timestamps, SHA-256, IT Act §5 statement).
• DSC digital signature: real PAdES signatures using a .pfx certificate file.
• Aadhaar eSign: on our roadmap. A test sandbox exists today, and sandbox signatures are not legally valid.

Yes. A public verification page checks a document by its reference, or by uploading the file, which is matched by its hash.

Not yet. DSC signing currently uses certificate files (.pfx). Hardware token support is on our roadmap.

That's a legal question, and the answer depends on the document and the law that applies to it. Your legal team should decide. DocVault gives you the options and the evidence.

It provides the working tools:

• a public data-request form (access, correction, erasure, nomination) with SLA timers
• a consent ledger
• a breach workflow with the 6-hour CERT-In clock and a pre-filled report
• a sensitive-data field inventory and a readiness report

These support your compliance programme. They are not legal advice and they don't on their own make an organisation compliant.

The legal hold wins. The file is kept, and the audit log records exactly what was kept and why.

Yes. Retention policies archive or delete on a schedule across the folders you choose, and a report shows what's coming up. Retention never overrides a legal hold or a lock.

It's an optional module. It finds Aadhaar cards in images and PDFs and masks the number and QR code, either on chosen folders, at upload, as a workflow step or as a bulk job. The masked file replaces the original. Masking is automated, so review the results for critical documents.

Yes. The audit log records who did what and when, with old and new values, and each entry is hash-linked to the one before it. Exports to CSV/XLSX match the on-screen filters exactly.

Yes, with the visual designer, without code. It has 8 triggers (such as file created or metadata changed) and steps for conditions, delays, move, copy, tags, metadata, notifications, retention, legal hold, Aadhaar redaction, and approval or signature requests. You can dry-run a workflow before enabling it.

They set an out-of-office deputy, who acts on their tasks under the deputy's own name, and the audit log records the delegation. Tasks can also be delegated one at a time.

Yes, through eForms: public forms with uploads, a signature pad, an expiry date and a submission limit. Each submission is filed as a numbered PDF, attachments become linked documents, and a submission can start a workflow.

Due dates are tracked and shown on reports, reminders can be scheduled, and the initiator is alerted when a due date is missed. Automatic escalation to someone else isn't built yet.

Yes. Scoped API keys can be limited to one section or folder with exactly the rights they need (read, upload, delete, create folder), and each comes with its own integration guide. Personal keys act with a person's own permissions.

Yes. Webhooks send file, folder, share and workflow events, signed with HMAC-SHA256. Failed deliveries are retried and every delivery is logged.

Not today. Microsoft 365 online editing and DigiLocker are on our roadmap. Signing is handled natively, with DSC support.

Pricing depends on your deployment, users, storage and modules. Ask for a quote.

Yes. Book a demo and bring some real (non-sensitive) documents, and we'll take them through the full journey.

Yes. Upload whole folder trees, or import ZIP archives that unpack into the same folder structure. You can number existing documents in bulk, and a report lists any documents missing required metadata.