Vault can't read your client's files. Not "won't." Can't.

Real end-to-end encryption: the key never leaves your device. This isn't a privacy policy — it's a technical limitation we built on purpose.

If your clients' files leaked today, you'd be the one answering for it.

Most storage services promise they won't look at your files. But they hold the key — which means, technically, they always could. Vault removes that question entirely: your encryption key is generated and stays on your device. It never reaches us.

How it actually works

The key never leaves the room it started in.

Your device
Sealed, unreadable
Our servers
01

Encryption happens on your device

Before any file leaves your computer or phone, it's already encrypted. What reaches our servers is unreadable — to us, to anyone who breaches the server, to anyone at all.

02

Your key is never transmitted

Your password generates the key locally. We never see, store, or transmit that key.

03

You control who has access

Every case file is isolated — only you and whoever you explicitly authorize can access it. Not other clients, not our staff, not anyone.

Built for lawyers

Built to support attorney-client privilege and the confidentiality duties of your bar's rules of professional conduct — enforced by architecture, not by a vendor's promise.

One thing before you start

Real security has a cost: we have no way to recover your account if you lose access. That's why signup takes about 10 minutes — longer than you're used to. We'll give you a 24-word recovery phrase and ask you to confirm you've saved it. It's the only way to guarantee that you, and only you, can access your files in the future.

Worth it.

Questions people actually ask

Answered here, not behind an accordion.

“What happens if I forget my password?”

At signup, you get a 24-word recovery phrase. Store it somewhere safe — it restores full access to your Vault, even without your original password. We'll soon offer a metal-engraved version, fire and water resistant, for anyone who wants a more durable physical backup than paper.

“What happens if Hathworth shuts down?”

In progress

Your files stay yours. We're finishing a standalone decryption tool — no connection to our servers — that anyone can use to access their files with their own key, even if Hathworth stops operating.

“Why isn't there a local synced copy, like Drive or OneDrive?”

Unlike Google Drive or OneDrive, Vault doesn't leave a readable copy on your computer. That's intentional: an unencrypted synced folder is exactly where most leaks happen — a lost, stolen, or seized laptop. Instead, you view your files directly inside Vault, in your browser. Files are decrypted in memory only — rendered through in-memory blob references, never fetched or displayed as a URL the browser could cache. Your files stay encrypted at rest, both on our servers and in your recovery backup.

Create your account in about 10 minutes. No credit card, no commitment.

Start free
Vault for professionals — zero-knowledge storage