Every document.
Every layer of trust.

It starts the moment a file arrives.

Drag in a single file or a whole folder tree. Large files upload in 10 MB parts straight to storage. If the network drops or the page reloads, the upload carries on from where it stopped.

• Resumable large uploads: parts go directly to storage and resume after a disconnect.
• Real type checking: the server checks what the file actually is, whatever its extension says. Executables, scripts and macro-enabled Office files are always refused.
• Unlimited versions: restore, download or compare any earlier version.
• ZIP import: unpack an archive into a matching folder structure. Zip-slip protected.

Once the file is safely stored, DocVault reads it.

Then it reads every page, in your language.

Text is pulled out of Word, Excel, PDF and more. Scanned pages go through OCR in 14 languages, 13 of them Indian, so you can search what a document says, not just what it's called.

• Deep search with quoted phrases, OR and exclusions, over the text inside your files.
• OCR in 14 languages, including Hindi, Tamil, Telugu, Bengali, Marathi, Urdu and more. Set the language per workspace or per folder.
• Metadata search: AND/OR filters, saved searches and CSV export.
• Permission-aware results: search never shows a file you can't open.

What DocVault can read, it can also file in the right place.

Structure that fits how your organisation works.

Sections, nested folders, metadata templates and document numbers that never repeat. These give your records the structure an auditor expects.

• Metadata templates with checks for PAN, GSTIN, IFSC, CIN, LEI, PIN and Aadhaar (checksum-verified).
• Required fields: a document can't be uploaded until its key details are filled in.
• Document numbering built from date, folder and metadata patterns, backed by a register that guarantees no number is used twice.
• 11 sector packs (banking, insurance, healthcare, RERA, SEBI and more) set up fields and folders in one click.

Structure means you can decide exactly who sees what.

Access, decided one permission at a time.

Four permission levels, or a custom mix of 17 individual rights. No one can share a file at a higher level than they hold. Separate organisations on one installation are kept apart inside the database itself.

• Previewer → Viewer → Editor → Owner, or Custom with 17 individual rights.
• Two-factor sign-in and a password policy per workspace: length, character types, lockout and expiry. Also idle sign-out, one session per user, and IP allow-lists.
• Watermarks stamped into the file itself, with the signed-in viewer's name, email and date.
• Row-level security in PostgreSQL keeps each organisation's data separate.

Once access is under control, sharing is safe.

Share freely. Take it back just as easily.

Share with people or groups, with an expiry date. Send public links with a password and a download limit. Mark up PDFs and images, and redact text so it's actually removed from the file, not just covered over.

• Public links to a file or folder, with password, expiry, download limit and instant revoke.
• Shared by me and Access overview show every grant, so you can review and remove access in bulk.
• Annotations: highlight, ink, notes, arrows, boxes, with undo and redo.
• Real redaction: redacted pages are flattened to images, so the hidden text can't be recovered.

When work moves between people, it can move on its own.

Draw the process once. It runs from then on.

A visual designer turns events into actions. A new file, a changed field or a finished approval can trigger a move, a tag, a notification, a retention rule or a signature request, with no code.

• Approve, review, acknowledge, with parallel, serial or custom steps, due dates, reminders and deputies.
• 8 triggers, 14 step types: conditions, delays, move, copy, tag, set metadata, notify, legal hold, retention, Aadhaar redaction, approvals and more.
• eForms publish a public form. Each submission is filed as a numbered PDF and can start a workflow.
• Dry-run test and run history for every workflow.

Many workflows end with a signature.

Signed, sealed, and verifiable.

Multiple signers, each placing their signature where it belongs. Every page is stamped with a reference ID. The signed copy comes with an audit-trail PDF and a public page where anyone can verify it.

• Native eSign: draw, type or reuse a saved signature, with each signer's name and email in the signature block.
• Audit-trail PDF: signer IP, method, timestamps and SHA-256 hash, plus an IT Act §5 statement.
• DSC signing: real PAdES digital signatures from .pfx certificates.
• Platform seal (optional): any edit after signing becomes detectable.

A signature is a commitment. The law asks you to prove it.

Ready for the auditor, the regulator, the data principal.

A DPDP toolkit, retention rules that run themselves, legal holds that take priority, and an audit log that records every action, with each entry chained to the previous one by hash.

• DPDP: public data-request form, consent ledger, and a breach workflow with the 6-hour CERT-In clock.
• Retention policies archive or delete automatically, but always respect legal holds and locks.
• Legal hold blocks deletion, erasure, signing and masking until it's released, with a recorded reason.
• Aadhaar masking (optional): finds Aadhaar cards and masks the number and QR code.

Underneath it all, someone has to run the system.

Your servers. Your brand. Your rules.

Install it on your own hardware or cloud and choose which modules ship. Put your own brand on it, run separate workspaces for subsidiaries or clients, and connect your systems through scoped API keys and signed webhooks.

• White-label: your logo, favicon, colours and login screen.
• Sub-accounts with storage quotas, plus user limits, a monitoring dashboard and LDAP / Active Directory sign-in.
• Scoped API keys limited to a single folder, and HMAC-signed webhooks with retries.
• Notifications: watch files and folders, digests, reminders, and a global switch to pause all email.