Every feature.
Nothing overstated.

Included

Drag-and-drop upload

Upload single files, many files or entire folder trees, and fill in metadata as you go, either the same for all files or file by file.

Included

Resumable large uploads

Files over 10 MB upload in parts directly to storage. The upload resumes after a network drop or a page refresh.

Resume after a refresh asks you to pick the same file again.

Included

Background upload progress

Uploads carry on in a progress panel while you keep working.

Included

Server-side type checking

The server checks a file's real content, not its name or the type the browser reports.

Included

Upload type policy

Executables, scripts, active HTML/SVG and macro-enabled Office files are always blocked. Admins choose which other categories are allowed, and set size limits.

Defaults: 250 MB for documents, 2 GB for media. Media is off until enabled.

Included

Unlimited versions

Add new versions, then restore, download, delete or compare any of them side by side (size, checksum, date, comment).

Compare shows version details, not a line-by-line content diff.

Included

In-browser preview

PDFs open page by page, so large documents (tested at 500+ pages) start showing quickly. Images, text files and Office documents preview too.

Office preview is an optional module.

Included

Copy deterrents for preview-only users

Right-click, copy and print/save shortcuts are blocked for people who may only preview.

A deterrent, not a guarantee: no website can block screenshots.

Included

Bulk download as ZIP

Select several files and download them as one ZIP that streams as it builds. Any unreadable files are listed in a note inside the ZIP.

Up to 50 files per ZIP.

Included

ZIP import

Upload a ZIP, then extract it into a new folder with the same structure. Protected against malicious archive paths.

Up to 500 MB / 500 files per archive.

Included

Rename, move & duplicate

Rename, move and duplicate both files and folders. Duplicates keep their metadata and tags.

Included

Recycle bin

Deleted items can be restored, and you can look inside deleted folders before restoring. Admins can purge or empty the bin. Items are cleared automatically after 30 days.

Items on legal hold or locked can't be purged.

Included

External links as documents

File links to web pages alongside documents. Approved sites can open inside DocVault.

Included

Related documents

Link documents with typed relationships. The link appears on both documents automatically.

Included

Live search

Instant results by file name and document number as you type.

Included

Deep full-text search

Searches the text inside Word, Excel, PowerPoint, PDF, text, HTML, CSV and OpenDocument files. Supports quoted phrases, OR and -exclude.

Optional module

OCR for scanned files

Scanned images and PDFs become searchable, with the language set per workspace or per folder. Changing the language re-indexes the files.

Reads the first 20 pages of each PDF; indexing runs in the background.

Optional module

14 OCR languages

English, Hindi, Marathi, Sanskrit, Bengali, Assamese, Gujarati, Punjabi, Odia, Tamil, Telugu, Kannada, Malayalam and Urdu.

Install only the language packs you need.

Included

Metadata search

Build AND/OR filters on any metadata or system field, save searches to reuse them, and export results to CSV.

Included

Protected personal data in search

Fields marked as personal data allow only exact or ends-with matches, are rate-limited and audited, and appear masked in results.

Included

Tag search

Search by several tags at once, matching all or any. Tags on a folder apply to everything inside it.

Included

Permission-aware results

Every kind of search goes through one access check, so you never see a file you're not allowed to open.

Included

Sections & nested folders

Top-level sections that admins control, with any depth of folders below. List and grid views, column filters, sorting and paging.

Included

Folder tags & my tags

Folder tags are shared, set by admins, and apply to everything inside the folder. My tags are private labels each user puts on files.

Included

Favourites

Star files and folders for quick access. The list re-checks your access every time it loads.

Included

Folder history

See everything that has happened to a folder: who changed, moved, shared or uploaded what, and when.

Included

Metadata fields & templates

Text, number, date, date-time, dropdown, checkbox and user fields, grouped into templates and assigned to folders.

A document keeps its template wherever it moves.

Included

Indian identifier checks

PAN, IFSC, CIN, PIN code, mobile and email are checked by format. GSTIN, LEI and Aadhaar are also checked by checksum.

Included

Required metadata

Uploads stop until required fields are filled in. An admin report lists every incomplete document.

For ZIP imports, missing fields are flagged rather than blocking the import.

Included

Document numbering

Build numbers from date, time, folder, metadata and sequence. Choose a start number and when the sequence resets. Numbers can apply to files, folders and links.

Included

Guaranteed-unique register

Every issued number is recorded in a searchable register that can't contain duplicates. Manual overrides are limited to admins and audited.

Included

Number existing documents

Number documents already in a folder in one bulk action.

Included

11 sector packs

One-click field and folder setups for banking (RBI), insurance (IRDAI), capital markets (SEBI), healthcare (NABH), RERA, government, education (UGC), ISO 9001, ISO 27001, KYC and DPDP.

These are templates, not certifications.

Included

Roles

Owner, Admin, User and External. There is a single owner, and ownership can be transferred.

Included

Permission levels

Previewer, Viewer, Editor, Owner, plus Custom with 17 individual rights. Share with users or nested groups, include sub-folders if you want, and set an expiry date.

Included

Sharing limits

A person can never share a file at a higher level than they hold themselves.

Included

Two-factor authentication

Authenticator-app codes, 10 recovery codes, blocking of reused codes, moving to a new device, admin resets with a recorded reason, and an email alert on every change.

Included

Account recovery for owners

The platform operator can reset a sub-account owner’s two-factor authentication after checks, and a server-side recovery command restores access if the main owner loses every factor.

Included

Workspace password policy

Each workspace sets its own minimum length, required character types, how many wrong passwords lock an account and for how long, and how often passwords must be changed. An expired password must be replaced at the next sign-in, after two-factor verification.

Applies to DocVault passwords; accounts that sign in through LDAP follow the directory’s rules.

Included

Lockouts that reveal nothing

A locked account answers exactly like a wrong password, so attackers can’t use sign-in to find out which accounts exist. The owner is emailed with the unlock time, and “Forgot password” lifts the lock at once.

Included

Confirm before sensitive actions

Sensitive actions ask for your password and 2FA again. The confirmation lasts 10 minutes.

Included

Single active session

A new sign-in ends the previous session. Idle sessions get a warning across tabs before timing out. Users can sign out everywhere, and admins can force a sign-out.

Included

Idle sign-out

Choose how long an idle session lasts and how long the “Still there?” warning counts down before signing the user out, across all their open tabs.

Included

Instant revocation

Disabling or suspending a user ends their session immediately.

Included

IP allow-lists

Restrict each workspace to approved IP ranges.

Included

Rate limiting & login throttling

Limits on API calls, uploads and sign-in attempts protect the service from abuse.

Included

Database-level tenant isolation

PostgreSQL row-level security keeps each workspace's data separate, in addition to the application's own checks.

Included

Watermarking

One policy controls watermarks on preview and download. They are stamped into PDFs, images, Word, Excel and text files with the viewer's name, email and date.

Applies to signed-in users. Public links serve the original file.

Included

File lock (check-out)

Lock a file while you work on it. Workflow locks and legal holds freeze it for everyone.

Optional module

Aadhaar masking

Finds Aadhaar cards in images and PDFs and masks the number and QR code. Runs on chosen folders, at upload, as a workflow step or as a bulk job. A report lists every document masking skipped, and why.

Optional ML service. Masking replaces the original file. Review results for critical use.

Included

Annotations

Highlight, underline, strike-through, box, text, freehand ink, arrows and notes on PDFs and images, with undo and redo. Works with touch and stylus.

Included

True redaction

Burning in redactions creates a new version where the hidden text is actually gone, because the redacted pages are flattened to images.

Redacted pages lose selectable text.

Included

LDAP / Active Directory sign-in

Users sign in with their directory password, which DocVault never stores. Import people from the directory. 2FA still applies.

One directory per installation.

Included

Share with people & groups

Share at Previewer, Viewer, Editor or Custom level, with an optional expiry date and a note in the email. Access is removed automatically when it expires.

Included

Public links

Links to a file or folder with a password, expiry date and download limit, which you can revoke instantly. Folder links only allow browsing inside that folder.

Included

Shared with me

Everything shared with you, including documents you reached through a workflow. Leave a share whenever you like.

Included

Shared by me

Every share and public link you've created, with its live status (active, expired, pending, revoked or used up). Revoke any of them with one click.

Included

Access overview

Admins see every direct grant for each person and can remove them in bulk. Access that came through a workflow is shown separately.

Included

Out-of-office deputies

A deputy acts on workflow tasks under their own name, and the audit log records the delegation.

Included

Approval before sharing

Shares and metadata changes can be held until an approval workflow signs them off.

Included

Approve, review, acknowledge

Parallel, serial or custom-order steps, with delegation, timeouts, due dates, reminders, supporting documents and a summary PDF.

Due dates are reported, not escalated, apart from a one-time alert when they're missed.

Included

My Tasks

One inbox for pending approvals, reviews, acknowledgements, signatures and reminders, with a count badge.

Included

Personal dashboard

Your pending approvals, signatures and acknowledgements at a glance, with your main sections, recent activity and, for admins, storage use.

Included

My history

Every decision you’ve made and every request you’ve started, in one place.

Included

Visual workflow designer

A drag-and-drop canvas with 8 triggers: created, new version, metadata changed, share added or removed, decision finished, tag added and moved.

Included

Automated actions

Conditions (name, extension, size, tag, folder), move, copy, set tag, set metadata, notify, delay, set retention, legal hold, Aadhaar redaction, and approval or signature requests.

Included

Scope & safety

Limit a workflow to several folders, a sub-folder depth or a name pattern. Workflows can trigger each other, with protection against loops.

Included

Test & history

Dry-run a workflow before turning it on, then review each run step by step with the reason for any failure.

Included

Ready-made recipes

Templates for contract approval, policy acknowledgement and confidential share review.

Included

eForm builder

Text, number, date and time, dropdowns, radio buttons, checkboxes, file and image uploads, signature pad, section headings and help text. Choose single or multiple answers.

Included

Public forms

Publish a form as a link with an expiry date and a submission limit. Every answer is re-checked on the server.

Included

Submissions become documents

Each submission is saved as a PDF in a folder you choose, can be numbered, and can start a workflow. Attachments become linked documents.

Up to 10 MB per file, 40 MB per submission.

Included

Native electronic signature

Draw, type or reuse a saved signature, place it on the page, and add multiple signers. Each signer's name and email appears in the signature block.

Included

Reference ID on every page

Every page of a signed document is stamped with its envelope reference.

Included

Audit-trail certificate

A PDF recording signer IP, method, timestamps and SHA-256 hash, with an IT Act §5 statement.

Included

Public verification

Anyone can check a signed document on a public page, by its reference or by uploading the file, which is checked by hash.

Included

DSC digital signatures

Real PAdES signatures from .pfx certificate files, with multiple signers and server-side validation.

Hardware USB tokens are not supported yet.

Optional module

Platform seal

A PAdES seal on the final signed copy makes any later change detectable.

Needs a certificate from a recognised CA in production.

Included

DPDP data requests

A public form for access, correction, erasure and nomination requests. Each request has an SLA timer (set per workspace; 30 days by default) and can be assigned, completed or rejected.

Included

Consent ledger

A record of consent receipts, recorded withdrawals and consent recorded on someone's behalf, with filters and CSV export.

Included

Breach & CERT-In workflow

Breach incidents tracked against the 6-hour CERT-In clock, with reminders to admins and a pre-filled report PDF that you submit yourself.

Included

Sensitive-data inventory & readiness report

An inventory of fields marked sensitive and a DPDP readiness PDF.

Supports your process; not legal advice.

Included

Retention policies

Archive or delete automatically on a schedule, across several folders, with a report of retention periods about to end. The file's creator is notified 90, 30 and 7 days before it expires.

Included

Legal hold

Blocks deletion, retention, erasure, signing and masking. Released from a console with a recorded reason, person and time.

Included

Legal hold overrides erasure

Files on a live legal hold are kept when an erasure request completes, and the audit log records what was kept.

Included

Hash-chained audit log

Every action is recorded with old and new values and chained to the previous entry. A health banner appears if recording ever fails.

Included

Audit export

CSV and XLSX exports that match the on-screen filters exactly, with timestamps in UTC.

Included

Reports

Storage, user activity, duplicates (by hash), pending workflows, retention ending, legal holds, incomplete metadata and file-list exports. Storage drills down folder by folder.

Included

In-app notifications

A notification bell and inbox, with mark as read.

Included

Watch files & folders

Get each change as it happens, or as a daily or weekly digest. Watching stops automatically if you lose access.

Included

Reminders

One-off or repeating reminders on any document, for people or groups.

Repeats are interval-based; specific days of the week aren't supported yet.

Included

Email preferences

Each person chooses which kinds of email they receive.

Included

Reliable email queue

Outgoing mail is queued and retried, so a mail-server outage doesn't lose messages.

Included

Email pause switch

Pause all outgoing email for the platform or for one workspace. Held mail is sent when you resume.

Included

White-label branding

Your name, logo, favicon, login background, colours and tagline, with a live preview.

Included

Sub-accounts

Separate workspaces for subsidiaries or clients, each with its own admin invite, storage allocation, and suspend or restore controls.

Included

Quotas & limits

A shared storage pool, workspace and section limits, user limits per plan, and an optional disk-space guard.

Included

User management

Invite, resend, enable, disable, delete and export users, with a detail page for each person. Profiles include an avatar, saved signature, time zone and a download of the person's own data.

Included

Groups

Nested groups whose members inherit access.

Included

Monitoring dashboard

CPU, memory, disk, database pool, indexing queue, errors, failed sign-ins and active users, with force sign-out and alerts.

Included

Time zones done right

Everyone sees times in their own time zone. Exports and signed documents use labelled UTC. Document numbering uses India time.

Included

Scoped API keys

Keys limited to one section or folder, with exactly the rights they need (read, upload, delete, create folder). Each key comes with an integration guide and can be rotated or revoked instantly.

Included

Personal API keys

Scripts that act with a person's own permissions.

Optional module

API demo app

A small ready-to-run demo shows your developers uploading through a signed-in session and through a scoped key, including bulk uploads and rate limits.

Included

Signed webhooks

File, folder, share and workflow events are sent HMAC-SHA256-signed, with retries, a test button and a delivery log.

Included

On your own servers

Runs as Docker containers on one server in your data centre or your own cloud account.

Included

HTTPS through your reverse proxy

Put DocVault behind your standard reverse proxy (nginx, a load balancer or similar) to serve it over HTTPS on your own domain.

A reverse proxy with TLS is required before exposing it to the internet.

Included

Choose your modules

One configuration file sets what ships. A module that's switched off isn't built, isn't run and doesn't appear in the interface.

Included

Install check

One command confirms the running install matches its configuration.

Included

Backup & restore scripts

Database dump plus storage mirror. A restore asks for explicit confirmation before it runs.

Copy backups off the server according to your own policy.

Included

Modest hardware

Runs on 2 vCPU with 4 GB RAM recommended (8 GB with Aadhaar masking) and about 30 GB of disk.

Roadmap

Single sign-on (SAML / OIDC)

Sign in through your identity provider.

Roadmap

Antivirus scanning on upload

Scan files for malware as they're uploaded.

Roadmap

Aadhaar eSign

OTP-based Aadhaar signature through a licensed eSign provider.

Available today as a test sandbox only. Sandbox signatures are not legally valid.

Roadmap

Microsoft 365 / online editing

Edit Office documents in the browser.

Roadmap

DigiLocker

Pull and push documents to DigiLocker.

Roadmap

High availability / multi-server

Run across several servers for failover.

Roadmap

Offline (air-gapped) installation

Install without an internet connection.