Security & Trust
Your browser encrypts file contents and names before upload. Invisivault keeps encrypted account keys, protected by a separate service key, to support email-based recovery.
Encryption model
File contents and names are encrypted in your browser before upload. Our servers store the encrypted copies and the account, size, date, and technical information needed to operate the service.
Hosting region
The web app and API run on Scalingo in France. Encrypted file storage is hosted by Hetzner in Germany. Other providers support payments, email, and abuse prevention.
Transport security
TLS is used for data in transit between your browser and our servers.
Incident response
We maintain an incident response runbook and notify authorities/users as required.
Law‑enforcement requests
We assess requests under applicable law. Because the service has key-recovery capability, we do not promise that readable content is technically inaccessible to us or could never be disclosed under a valid legal requirement.