Encrypted docs & sheets

Documents and spreadsheets that are ciphertext the moment you stop typing.

A zero-knowledge editor for contracts, budgets, treatments and case notes — sealed on your device, shared per member, versioned and recoverable.

The provider should not be a reader of your drafts.

For lawyers, accountants, producers, founders and consultants who draft confidential material and refuse to store it in a cloud that can index it.

Built for confidentiality

Docs and sheets, sealed

Every document body and every cell is encrypted with XChaCha20-Poly1305 on your device before the save request leaves it.

Shared per member

The document key is wrapped individually with X25519 for each collaborator. There is no master key and no admin override.

Versions you can roll back

Encrypted version history keeps previous states retrievable without ever exposing a plaintext copy to the server.

Blind-index search

Titles are searchable through HMAC tags computed on your device, so you can find a document without the server knowing its name.

PDF signing and annotation

Sign, type on and annotate PDFs locally, then return them encrypted in the same channel — no third-party signing service in the loop.

Export whenever you want

Export to standard formats on demand. Decryption happens on your device, so exit is never blocked by us.

Why collaborative editors usually cannot be zero-knowledge

Mainstream editors do real-time merging on the server, which means the server must read the document. DRIVUNO makes the opposite trade: merging and rendering happen on the devices that hold the key, and the server only stores and relays sealed states. You give up server-side AI features you did not want, and gain a provider who cannot read your draft.

Built for documents that matter

Term sheets, employment files, medical summaries, scripts under embargo, cap tables. These are exactly the documents that most often end up in a general-purpose cloud because it is convenient. DRIVUNO keeps the convenience — web, desktop and mobile editing, sharing, versioning — and removes provider access.

Docs live next to the work

A document created inside a Rooms channel belongs to that channel's sealed space, alongside its messages, tasks, calendar and Team Drive folder. Access is a single membership decision, and revoking it rotates every key in that scope.

Frequently asked questions

Can DRIVUNO read this content?

+

No. Everything in the DRIVUNO suite — files, messages, events, documents, notes, tasks and photos — is encrypted on your device with XChaCha20-Poly1305 before it is sent. Keys are derived locally from your password with Argon2id and wrapped per member with X25519. Servers store ciphertext only.

How is this different from Google Workspace or Microsoft 365?

+

Those suites encrypt data in transit and at rest, but the provider holds the keys, so content can be indexed, scanned by AI, exported by an administrator or produced on legal request. DRIVUNO is built so that we hold no key that opens your content.

Who can see a shared item?

+

Only the people the item is sealed for. Every room, folder, calendar and document key is wrapped individually for each member with X25519. Removing someone revokes their sealed copy and rotates the key.

Does search still work if everything is encrypted?

+

Yes. DRIVUNO uses blind indexes: your device computes HMAC tags for names and subjects, and the server matches tags without ever seeing plaintext.

Is there a free plan?

+

Yes. The free plan includes 1 GB with the exact same zero-knowledge architecture — encrypted drive, Rooms, calendar, docs, notes, tasks and sharing.

What happens if I lose my password?

+

Because we cannot read your data, we cannot reset it. You can create a Recovery Kit (printable PDF with QR) when you set up your account and store it offline. Without your password or recovery key, encrypted data cannot be recovered — by design.

Related

Your sensitive files deserve more than a traditional cloud.

Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.

1 GBfree vault
Encrypted on your device · upload in 1 click
Upload