Documents for compliance teams
Upload files of up to 50 GB, each encrypted on its own. Organize them in folders, share them with access levels and protected links, and show who did what with the audit log.
Part of the ARCA Compliance family. Sign in with your ARCA account.
How it works
Drag in files or whole folders, up to 50 GB per file. Large files go up in parts and carry on if the connection drops.
Team folders and a personal space, tags, favorites and expiry or review dates.
With access levels inside your organization, or outside with a protected link. And ask people without an account for files.
The audit log and the evidence package show what was kept, who saw it and when.
The product
Open it in the browser, keep every version and find it by its name or by what it says.
PDFs, Word, spreadsheets, CSV, Markdown, e-mails, images, video and archives open without downloading them. Move from one file to the next with the arrows.
Each new version keeps the one before with its note, and any of them can become current again. Text, Markdown and CSV files are edited in the browser: if two people save at once, nobody overwrites the other.
Folders for the whole team and a personal space, files by type, up to 20 tags per document, favorites and recent files at hand.
By name, title or description from the top bar. If an admin turns it on, also inside PDFs, Office documents and text files, and in images and scanned PDFs, whose text is recognized (OCR).
Encryption, isolation between organizations and access with your ARCA account, on every file.
Each file is encrypted with AES-256-GCM before it is stored, under a key of its own, itself stored encrypted under your organization's key. Thumbnails and previews too.
The database only returns the rows of the organization you signed in to (PostgreSQL row-level security), and live updates reach only the people concerned.
Vault keeps no passwords: you sign in with your ARCA Compliance account, with two-step verification or passkeys, and signing out ends the session in every product.
Every file is scanned with ClamAV. What is infected is not stored, or is held and nobody opens it; your organization decides what happens to what cannot be scanned.
Compliance
What is kept, what falls due and who did what, with proof you can export.
Set how long each document is kept, for example 5 years for AML records. Before that date nobody can move it to the trash, and every change to the rule is recorded in the audit log.
Freeze documents or whole folders with no end date: they cannot be deleted or moved, and the trash does not purge them.
Set when a document expires or is due for review. Your notice contacts get an e-mail about what falls due, as far ahead as you choose (30 days by default).
Deleted documents wait 30 days before they are purged; an admin can choose anything from a week to 10 years.
Who viewed, downloaded, uploaded, edited or deleted each document, and changes to settings and retention, filtered by person and dates and exported to CSV.
Export a folder with its manifest (every file's SHA-256, versions, retention and malware verdict) and its activity, up to 2,000 files and 2 GB per export.
Use cases
Ask for due-diligence documents with a file request: they arrive encrypted in the client's folder.
Every approved version is kept, and the review date warns when it is time to update it.
Gather what backs a conclusion and hand it over as an evidence package, with its manifest.
Create your organization and start uploading your documents today.
