Security features that actually mean something
No vague "enterprise-grade" claims. Here's exactly how DeadVault protects your clients' sensitive documents.
Real encryption, not marketing encryption
AES-256-GCM Encryption
Every file is encrypted with its own unique AES-256-GCM key before being written to storage. Keys are wrapped with a master key and stored in a separate key store, never alongside file data. This is authenticated encryption: it guarantees both confidentiality and integrity.
- ✓Per-file encryption keys
- ✓Master key wrapping
- ✓Separate key storage
- ✓Authenticated encryption (GCM mode)
Key destruction is the security story
Cryptographic Erasure
When a box reaches its deadline, we destroy the encryption keys. Without the key, the encrypted data is mathematically unrecoverable, by anyone, including us. This is cryptographic erasure: the real mechanism behind secure file destruction.
- ✓Key destruction at deadline
- ✓Mathematically unrecoverable
- ✓Best-effort byte overwrite on local storage
- ✓45-day hard cap from creation
Collect before they download
Payment Gates
Set a payment amount when creating a drop. Clients must complete payment via Stripe before accessing files. Perfect for tax return delivery fees, retainer deposits, engagement letter fees, and document preparation charges. Funds go directly to your connected Stripe account.
- ✓Stripe integration
- ✓Payment before access
- ✓Direct deposit to your account
- ✓Per-drop payment amounts
Your firm, your portal
Branded Client Portal
Upload your logo, set your brand colors, and customize the client experience. Clients see your firm's identity, not a generic upload page. On Enterprise plans, use your own custom domain for the full white-label experience.
- ✓Logo & color customization
- ✓Custom welcome messages
- ✓Firm name throughout
- ✓Custom domain (Enterprise)
Every action logged and exportable
Complete Audit Trail
Every file access, download, upload, and portal visit is logged with timestamps, IP addresses, and user agents. The audit trail is export-ready for compliance reviews, regulatory audits, and internal record-keeping.
- ✓Timestamp + IP logging
- ✓Download tracking
- ✓Access attempt logging
- ✓CSV/JSON export
Two-factor access without accounts
PIN Protection
Add an optional PIN code to any drop. PINs are delivered via a separate channel (SMS, phone call, existing email thread). This gives you two-factor file access without requiring clients to create accounts, install apps, or remember passwords.
- ✓Separate-channel delivery
- ✓No client account required
- ✓Per-drop PIN codes
- ✓Brute-force protection
And more
Everything else you need to run a professional, secure file transfer practice.
Destruction Certificate
Downloadable PDF proving when encryption keys were destroyed, what files were in the drop, and SHA-256 checksums. Compliance documentation that no one else offers.
Bulk Drop Creation
Create up to 200 drops at once via CSV upload or manual entry. Shared settings, individual PINs, automatic invite emails. Built for tax season.
Client Directory
Save client contact info so you never re-type it. CSV import for bulk onboarding. Auto-populate drop forms from saved contacts.
Two-Factor Authentication
TOTP-based 2FA for your professional dashboard. Protect access to client data with an authenticator app, because attorneys and CPAs should practice what they preach.
Mobile Document Scanner
Clients scan physical documents directly into a drop from their phone camera. Auto-crop, multi-page, compiled to PDF client-side. No app required.
Multi-Language Portal
Client portal available in English, Spanish, French, and Portuguese. Auto-detects browser language. Your clients use the portal in their preferred language.
Proof of Delivery
Export a PDF or CSV audit trail showing exactly who accessed, downloaded, and uploaded files, with timestamps and IP addresses. Court-ready documentation.
White-Label Emails
Client-facing emails use your firm name, logo, and brand colors. Professional appearance without a generic "sent via" experience.
File Type Restrictions
Limit uploads to specific file types per drop: only PDFs, only images, or any combination. Prevent clients from uploading 2GB zip files when you need a W-2.
Tags & Organization
Tag drops by client, matter, or tax year. Search by client name or email. Sort by date, deadline, or name. Filter by status and tags.
Templates with Checklists
Firm+Save drop configurations as templates, including document checklists. One click to create a "Tax Return Collection" drop with all 6 standard document requests pre-loaded.
Webhooks & API
Firm+Real-time event notifications and full REST API access. Integrate DeadVault into your existing workflow tools.
Automated Reminders
Add-onEmail and SMS reminders at 7 days, 3 days, 24 hours, and 6 hours before deadline. Clients who haven't uploaded get nudged automatically.
Team Management
Firm+Invite team members, assign roles, and manage permissions. See who created which drops and track team activity.
Deadline Extensions
Grant clients one extension per box, half the original duration, with a hard cap of 45 days from creation. Controlled and predictable.
Enterprise
Need custom integrations or dedicated infrastructure?
Enterprise plans include custom domains, full API access, advanced analytics, and dedicated support. We'll work with your compliance team to meet your specific requirements.