Security built into every document view.
CIPHER protects documents in storage, in sharing, and on screen, without sending a camera feed anywhere.
Encryption at rest
Encrypted before it is stored.
Every file is encrypted with AES-256-GCM before it is written to storage.
On-device detection
Camera frames never leave the device.
Phone detection runs in the viewer's browser. Frames are analysed in memory and discarded immediately; no image or video is sent to CIPHER.
Access control
Every view is a deliberate decision.
Roles, per-file permissions, approved access requests, and guest links that expire and can require a PIN to download.
Session protection
Idle sessions sign out.
Admins choose how long an inactive session stays signed in, so an unattended screen does not stay open.
Audit trail
A record that did not exist before.
Views, shares, downloads, access decisions and capture attempts are recorded and surfaced as alerts.
Plain claims
No certifications we do not hold.
We describe what CIPHER does today and nothing more. Ask us for technical detail during your evaluation.
Need documents to stay inside your own infrastructure? With the CIPHER SDK, detection runs inside your own platform, and your documents and capture events never reach CIPHER.
Questions from your security team?
For specific security, legal or compliance questions, our team can provide additional information during the evaluation process.
Contact Our Team About Security