Encrypted files.
The application encrypts files and filenames using AES-256-GCM. Documents are kept in private storage and transferred over an HTTPS connection in production.
Individual access.
Each person uses their own access. Sign-in works through an invitation link, an email code or a passkey. Each firm has a separate workspace.
An accessible history.
Actions are recorded in a log that the application cannot rewrite. Owners and administrators can review it and export it as a CSV.