Hardened authentication
Hashed passwords (bcrypt), complexity policy, lockout after repeated failures, TOTP two-factor with recovery codes, sessions revocable one by one or all at once.
Security
Security is not a paid extra
Everything below is in the product, whatever the plan — including the free one.
Sealed audit log
Every entry carries the fingerprint of the previous one. Changing a line, or removing one from the middle, breaks the chain at that exact point, and the check says which. What it does not do: stop whoever holds the server from rewriting — it makes the rewrite visible.
Personal data
Register of processing activities, right of access exported source by source, erasure that keeps what the law requires kept and says so. The account is anonymised rather than deleted, so the records that reference it stay consistent.
Internal whistleblowing channel
Mandatory in France from fifty employees. Content encrypted in the database, readable only by the appointed officers — not by administrators, since a report may be about one of them. Anonymous follow-up by code, without an account and without logging.
Verified backups
Hourly archive, integrity checked against a manifest, restore that puts back both database and files, off-site copy over FTPS or Google Drive, and administrators alerted on failure.
Encrypted secrets
Third-party service passwords, API tokens, webhook secrets: encrypted with AES-256-GCM, never shown again in the clear, unreadable once tampered with.
Log centre
Eight levels, seven channels, retention per level, and a continuous copy to your syslog server or to Wazuh. No secret ever enters it, each target keeps the number of the last entry received — so a collector outage loses nothing — and a target that fails ten times switches itself off and says so, rather than letting you believe the logs are leaving.
or hosted by you
SaaS, or on your own servers
On SaaS we host in Europe, backups included. On paid plans, local hosting is available: you install on your server, the database never leaves your walls, and you get the same updates. One machine is enough — Node 22 and SQLite, no external database to administer. A MySQL server is driven if you have one, but nothing requires it.
What we do not claim to do
Electronic signature is simple, not qualified in the eIDAS sense. The vault seals and dates documents, but timestamping enforceable against a third party requires a certification authority. No tax or social filing: the software produces the data, submitting it stays with your accountant. That is written here rather than after you sign.
Frequently asked questions
Can I host my data on my own server?
Yes, on paid plans. The software runs on a single machine with Node 22 and SQLite: no database server, no external service. You keep the database, the documents and the backups. A MySQL server is driven if you have one, but nothing requires it.
What happens if I leave?
You export the entire instance as JSON, documents included, from the admin console. Nothing is held hostage: it is your database, and it leaves with you in a readable format.
What about integrations with our tools?
A scoped read-only REST API and signed outgoing webhooks are included in every plan. For specific exchanges — HR systems, ERP, invoicing — write to us: that work is quoted case by case.
Start free, change plan when you grow
The first five employees are free, always. Above that, €5 per employee per month. No credit card to try.