Authenticated encryption
Encrypted objects are authenticated so corruption or modification fails closed.
Technology
Security is a system, not a feature label.
OwnKeep combines authenticated encryption, SQLCipher metadata storage, device-protected key handling, and deterministic local processing.
01
→Capture
User-selected files enter an approved local workflow.
02
→Preserve
The immutable original is encrypted before organization.
03
→Understand
Supported OCR and extraction run locally for review.
04
Use
Search, reminders, links, and export remain user-directed.
Database protection
Structured metadata, tags, extracted fields, reminders, and graph records stay in SQLCipher.
Key separation
Recovery credentials and convenient device unlock serve different roles.
Offline processing
Core classification, OCR integration, extraction, and search avoid mandatory cloud calls.
Backup verification
Portable encrypted archives are verified before restore activates a replacement vault.
Plaintext discipline
Decrypted originals use short-lived private leases and explicit export boundaries.
Transparent limitations matter
Hardware-backed protection, biometrics, camera capture, scanners, OCR providers, and notification behavior vary by operating system and device. OwnKeep is designed to report those limits rather than represent unavailable capability as successful.
Review before authority
Machine-extracted details are suggestions. The product keeps the original as evidence and asks the user to verify important fields before they become trusted life information.
Let's talk
Discuss the architecture
For security, integration, or platform questions, contact the Alviteq team.