Know where every compliance document is, who can access it, and when it expires.

“Built for compliance, HR and operations teams who have to prove their documents are current.”

How it works

One secure place for every compliance document your organisation depends on

• Upload. Add each document and its expiry date.
• Stay ahead. Reminders go to the person responsible, before anything lapses.
• Prove it. Show a clean dashboard, or share exactly what an auditor asks for.

Everything in one dashboard

Store and manage every compliance record in a single dashboard. See total records, spot what’s expiring, and open or download any document in a click. Each record has a clear owner, so you always know who is responsible for what.

Never miss an expiry

Compliance Vault tracks expiry dates for you and sends a weekly expiry digest, so renewals are handled on your schedule, not the auditor’s.

Built for teams

Invite your team by email. New members create their own account from a secure invitation link.

Organise by department. Assign people to HR, Operations, Finance or Legal.

Shared visibility for administrators. Client administrators see the whole organisation’s records, including documents reassigned between team members.

Reassign documents when responsibilities change, with a full record of the handover.

Projects and sites

Give each site a checklist of required documents. Send subcontractors a private link to upload what’s missing. They don’t need an account, and nothing goes live until you approve it.

Employee contracts.

Keep contracts in one place that only the account owner and Human Resources can open.

Share documents.

Need to show something to a regulator or auditor? Pick the documents and send a link that expires. Each document can be downloaded once, and you can see when the link was opened.

Encryption you control

Compliance Vault protects your documents with encryption that starts in your browser, with keys that belong to your organisation.

Your documents are locked in your browser before they are stored, so even we can’t open them

• Your own vault key. When your organisation sets up its vault, your browser generates a unique, random vault key. Every client gets a different one.
• Two ways in, so you’re never locked out. Your vault key is protected twice: once by a key derived from your passphrase, and once by a recovery key, a random 256-bit key you download as a file and keep somewhere safe. Either one can unlock your vault.
• A separate key for every document. Each file is encrypted with its own file key, and that key is in turn protected by your vault key. Documents are isolated from one another, and a single file’s key never exposes the rest.
• Keep your recovery key safe. If you lose both it and your passphrase, nobody can recover your documents.