Features Platform Sovereignty SFTP & API Try Demo
Enterprise-Grade · Data Sovereign · Compliant

Your data.
Your region.
Your rules.

EidoVault delivers sovereign enterprise document storage for organisations with strict data residency and governance requirements — KSA, UAE, and beyond. SFTP, REST API, controlled sharing, legal hold, audit visibility, AI/OCR, and browser-based document collaboration in one private deployment.

Try demo See it in action
AES-256 encryption at rest Regional data residency Full audit trail

Built for enterprise

Everything your security team will ask for

EidoVault ships with the controls, audit trails, and access policies that regulated industries demand — without a year of custom integration.

Envelope Encryption

Files can be protected with application-level envelope encryption and your cloud KMS, so storage, keys, and access policy stay under your control.

SFTP Gateway

Drop-in SFTP access for legacy systems and automated pipelines. Standard port 22 — no client changes required.

SSO, SCIM & MFA

OIDC single sign-on, SCIM user provisioning, and TOTP MFA help align access with your existing identity and security operations.

Detailed Audit Trail

Track authentication, file activity, public links, SFTP transfers, approvals, role changes, and administration in one compliance-ready log.

Granular Role Control

Separate system administration, storage governance, uploader, viewer, auditor, and temporary support responsibilities with least-privilege access.

File Versioning

Version history, restore, duplicate detection, same-file-type version control, and actor traceability help recover from mistakes and investigate changes.

Antivirus Scanning

Uploads are routed through malware scanning, with infected or blocked content quarantined or flagged with the uploader and event context.

Controlled Sharing

Share files and folders with users, groups, upload-only recipients, password-protected links, public links, expiry rules, and download restrictions.

Document Collaboration

Open supported Word documents, spreadsheets, and presentations in the browser, collaborate in real time through the integrated editor, and preserve changes as auditable versions.

AI Document Intelligence

Ask questions, get summaries, extract text with OCR, and suggest tags using your approved AI provider, including regional OCI Generative AI deployments.

REST API & Webhooks

Scoped API keys, documented REST endpoints, SCIM provisioning, SFTP automation, and signed webhooks connect EidoVault to enterprise systems.

Legal Hold & Retention

Place files, folders, or users on legal hold, inherit hold rules into new uploads, and manage retention without relying on filename searches alone.

E-Signature Workflow

Send documents for signature through an approved provider, capture request status, callback evidence, and audit events from the file record.

Sovereign Deployment

Deploy into your own OCI Riyadh, GCP, or private cloud environment with regional storage, database, compute, keys, and AI provider controls.

White-Label Ready

Custom org name, logo, and brand colour across the entire interface. Deploy under your own domain with your own identity.

Governance first

For files that need policy, not just storage.

Legal hold, classification, restricted downloads, audit trails, retention controls, and role separation are built into the vault experience.

Residency by design

Run the vault where the data must live.

Deploy into OCI Riyadh, GCP, or private cloud with storage, database, compute, keys, and AI provider choices scoped to the agreed region.

Operationally connected

Designed to fit existing enterprise workflows.

SFTP, REST API, scoped API keys, signed webhooks, OIDC SSO, SCIM provisioning, and provider-backed e-signature workflows keep integrations practical.

Capability coverage

Depth where regulated document platforms are judged

EidoVault combines secure storage, governed sharing, regional deployment, AI/OCR, auditability, and browser-based editing for supported Word documents, spreadsheets, and presentations in one tenant-controlled vault.

Legal hold OCI Riyadh SCIM SFTP AI/OCR Audit
01Document management

Tenant repository, folders, upload, quotas, versions, restore, duplicate detection, trash, and indexed search. EidoVault also supports same-file-type version control and OCR-assisted text extraction for supported files.

02Collaboration and editing

Browser editing and real-time collaboration for supported Word documents, spreadsheets, and presentations. Editing remains governed by EidoVault permissions, read-only viewer sessions, version timelines, audit records, and legal hold restrictions.

03Controlled sharing

User, group, folder, public-link, password-protected link, and file-request sharing. Controls include expiry, max views, download permission, upload-only access, upload-without-delete, version-upload permission, and public-share activity capture.

04Records and governance

Legal hold for files, folders, and users with inherited hold rules for new uploads. EidoVault restricts edit, delete, and version changes for held files, supports retention, classification labels, restricted file controls, watermarked downloads, and approval-based original downloads.

05Security and identity

System Admin, Storage Admin, Uploader, Viewer, Auditor, and temporary Support Engineer roles. Identity and security controls include OIDC SSO, SCIM provisioning, local users, invite links, TOTP MFA, IP allowlisting, envelope encryption with cloud KMS, malware scanning, blocked extensions, session controls, and API policy.

06Audit and compliance

Audit trails cover authentication, MFA, upload, download, preview, copy, share, delete, rename, version activity, role changes, public-share actions, SFTP activity, restricted download approvals, legal hold changes, and e-signature provider callbacks.

07Deployment and residency

Deploy into OCI Riyadh, GCP, or private cloud environments. Terraform and Helm patterns cover Kubernetes, object storage, database, KMS, ingress, app services, Google Cloud Storage, OCI Object Storage, and OCI Generative AI residency configuration where supported.

08Integrations and API

REST API, scoped API keys, SFTP gateway, signed webhooks, SCIM provisioning, OIDC identity federation, AI/OCR provider configuration, and provider-backed e-signature workflows support enterprise automation and compliance processes.

09AI and OCR

Document Q&A, summaries, full-vault search, OCR, content extraction, auto-tag suggestions, and classification suggestions. Provider choices include OpenAI, Claude, Gemini, OCI Generative AI, bring-your-own-key options, and policy limits for confidential, restricted, or legal-hold content.

10User experience

Web file browser, folder tree, recent files, starred files, trash, previews, right-click actions, role-based onboarding, Arabic and RTL support, responsive web access, white-label branding, custom organisation name, logo, colour, and custom domain.

11Operational controls

Tenant quotas, user storage allocations, default user quota settings, per-tenant upload limits, public sharing policy, file request policy, API key policy, webhook approval policy, and temporary support windows. Production sizing covers editing concurrency, scan throughput, backup, restore, and search performance.

EidoVault is strongest where the requirement is a governed, private, auditable document vault with regional data residency. Browser editing and collaboration are included for supported files, while high-concurrency editing, disaster recovery, and large-repository performance are validated during deployment sizing.

Interactive Preview

Try it, don't just see it

A live, clickable slice of the actual product — open folders, preview a file, review version history, and tour the security controls. No sign-up, right here in your browser.

vault.yourorg.com
EidoVault
FilesAdmin
SA
My Files
New folder
Upload
NameSizeModified
Live demo — everything here is clickable
EidoVault
Board Reports/Q3-Budget-Model.xlsx
SA

Q3-Budget-Model.xlsx

SA
MK
RA
3 people editing
FileEditInsertFormatDataAuto-saved · v14
A
B
C
D
E
1
Line item
Q1
Q2
Q3
FY
2
Revenue
1.24M
1.51M
1.68M
4.43M
3
COGS
420K
505K
560K
1.48M
4
Gross margin
66%
67%
67%
67%
5
Opex
380K
410K
445K
1.23M
6
EBITDA
440K
595K
675K
1.71M
EidoVault
FilesAdmin
SA

Security & Policy

Region: KSA-Central
248
Active users
+12 this week
341GB
Storage used
of 1 TB
18.2K
Files stored
all encrypted
63
Active shares
4 expiring soon
Public link sharing
Allow files to be shared via public links
Default link expiry
Auto-expire shared links after a set period
7 days
Upload file-type restrictions
Block executables and unknown formats
Enforce MFA for all users
Require a second factor at every sign-in
EidoVault
Compliance/Data-Residency-Policy.pdf
SA

Version history

5 versions retained
Version 5Current
Maryam Khalid · 08 Jul 2026, 14:22 · 320 KB
sha256 a3f1c8…7b9c2e04
Version 4↺ Restore
Rashid Al-Amri · 02 Jul 2026, 09:10 · 318 KB
sha256 71de44…c1a8f320
Version 3↺ Restore
System Administrator · 24 Jun 2026, 16:41 · 311 KB
sha256 0b92ac…5f7e1d66
Version 2↺ Restore
Maryam Khalid · 18 Jun 2026, 11:05 · 305 KB
sha256 c4e7b1…9a2004ef
Version 1↺ Restore
System Administrator · 16 Jun 2026, 08:30 · 298 KB
sha256 e81f60…3d5c7b12
secure transfer session
$ sftp -i ~/.ssh/eidovault_key [email protected]
Connected to private regional endpoint.
sftp> cd /landing/reports
sftp> put quarterly-risk-report.xlsx
Upload complete · encrypted · versioned · audit logged
sftp> ls -lh
quarterly-risk-report.xlsx 5.7MB ready
Standard SFTP and REST API access, routed through encrypted storage policy with every transfer logged.
SFTP Gateway
No client rewrite
Legacy jobs keep using standard SFTP while storage policy is enforced centrally.
REST API
Scoped access keys
Automate uploads, metadata, sharing, retention, and audit export through controlled endpoints.
Audit Trail
Every transfer captured
Actor, source, file hash, timestamp, and destination path are recorded per event.

Drive-style file workspace · CLICK AROUND ↑

Open a folder, click a file to preview its details and integrity hash, then use the breadcrumb to step back. Home, Shared, Recent, Starred, Trash — full folder tree, grid or list view, drag-and-drop upload, and a live storage quota.

Drag & drop upload Grid / list view PDF & Office preview Storage quota

Real-time Office document collaboration

Open supported Word documents, spreadsheets, and presentations in the browser, collaborate through the integrated editor, and keep edits tied back to EidoVault permissions, audit, and version history.

Word / spreadsheet / presentation Controlled access In-browser editing Auto version save

Admin policy and security controls

Toggle public sharing, set link-expiry defaults, restrict upload file types, and review live user metrics and storage usage — all from one dashboard.

IP allowlist Sharing policies Upload restrictions Usage dashboard

Complete file version history

Every file version retained with timestamp, actor identity, file size, and SHA-256 hash. One click to restore any previous version.

SHA-256 integrity One-click restore Actor traceability Retention policies

SFTP transfer workflow

Existing scripts and teams can push files over standard SFTP while EidoVault handles folder placement, encryption, versioning, and audit capture behind the scenes.

Port 22 workflow Legacy system ready Encrypted landing zone Audit logged

More product screens

Additional interface states across browsing, previews, sharing, transfer access, and authentication.

EidoVault list view with folder tree
Workspace
List view with folder hierarchy
EidoVault folder workspace grid view
Workspace
Folder browsing and upload controls
EidoVault PDF preview side panel
Preview
PDF preview with file actions
EidoVault browser-based Office document editor
Collaboration
Office document editing surface
EidoVault malware scanning state
Security
Threat scanning before preview
EidoVault share file modal
Sharing
User sharing permissions
EidoVault SSH key management panel
SFTP
SSH key management
EidoVault two-factor authentication setting
Identity
Two-factor status in profile
EidoVault two-factor login challenge
Login
MFA challenge screen

Data Sovereignty

Stays in your region. Always.

EidoVault deploys inside the cloud account and region you approve. Storage, database, compute, encryption keys, and AI provider configuration can be scoped to the residency boundary agreed at provisioning time.

Built for enterprises in jurisdictions with strict data localisation laws, including KSA NDMO, UAE data protection regulations, and GDPR-constrained environments.

KSA Compliant UAE Ready GDPR Compatible CMEK Encrypted
Private
Dedicated infra — no shared tenants
0
Cross-border data transfers
100%
Events captured in audit log
256-bit
AES encryption at rest

SFTP Gateway & REST API

Legacy systems.
Modern security.

EidoVault exposes a standards-compliant SFTP endpoint and a full REST API — so existing workflows integrate without modification, while benefiting from encryption, versioning, and audit controls underneath.

  • Standard port 22 — no client changes needed
  • SSH key and password authentication
  • Per-user home directory isolation
  • All transfers logged to audit trail
  • Bandwidth and file-size limits per account
  • Source IP allowlisting per user
186
REST endpoints
21
Resource types

Full REST API with scoped keys

Bearer token auth with read/write scope control. IP allowlist enforced on API traffic. Webhooks for file events and audit streaming.

Bearer auth Read / Write scopes IP allowlisted Webhooks
# Connect via SFTP with SSH key
$ sftp -i ~/.ssh/key [email protected]
 
Connected to sftp.vault.yourorg.com.
sftp> put quarterly_report.pdf reports/
Uploading... 100% ✓ Encrypted · Versioned · Audited
 
# Or call the REST API
$ curl -H "Authorization: Bearer ssk_…" \
     https://vault.yourorg.com/api/v1/files
 
[{"id":"f_01j…","name":"report.pdf",
 "size":2461184,"version":3,"hash":"sha256:…"}]

Built-in Intelligence

Ask your documents anything

Every file in EidoVault can be indexed for AI-assisted search and OCR. Your admin selects the approved provider — OpenAI, Claude, Gemini, or OCI Generative AI for regional deployments — and applies tenant policy before document content is sent for analysis.

  • Ask any question about a document and get a precise, cited answer
  • One-click summaries for PDFs, spreadsheets, and long-form documents
  • Auto-tag suggestions based on content analysis — accept or dismiss
  • AI-powered full-vault search beyond filename matching
  • Bring your own approved provider key — OpenAI, Claude, Gemini, or OCI Generative AI
  • Use regional AI configuration where residency rules require it
EidoVault AI
Q3_Financial_Report.pdf
2.4 MB · PDF · version 3
Summarise
AI Summary

This 47-page report covers Q3 FY2024 results across MENA operations. Revenue grew 18% YoY. Operating margin improved to 24.3%. Key risk: currency exposure in UAE projects through Q4.

Ask
Answer

Operating margin reached 24.3%, up from 21.1% in Q3 FY2023. The improvement was driven by reduced logistics costs and higher-margin government contracts in KSA. (p.14, §3.2)

Suggested tags financial Q3-2024 MENA confidential

Deployment

Up and running in days, not months

EidoVault deploys to your own cloud account via Terraform and Helm, including OCI Riyadh, GCP, and private cloud patterns — you own the infrastructure from day one.

1

Region & account selection

Choose your cloud account and region, such as OCI Riyadh or GCP. Infrastructure is provisioned inside the agreed residency boundary.

2

Terraform provisioning

We run the Terraform and Helm deployment against your account, covering Kubernetes, database, object storage, KMS, ingress, application services, and security configuration.

3

Branding & identity setup

Upload your logo, set your org name and brand colour, configure your OIDC provider or local admin credentials.

4

Onboard your team

Create users, assign roles, configure SFTP and API access, and set storage quotas. Invite users — they're storing in minutes.

Access Control

Right access. Right people.

Six purpose-built roles separate administration, storage governance, upload, view-only, audit, and temporary support access. Assign the minimum access each person needs.

System Admin
Storage Admin
Uploader
Viewer
Auditor
Support Engineer

Get started

Ready to own your storage?

EidoVault is deployed to your infrastructure, in your region, under your control. Get in touch and we'll scope out a deployment for your organisation.

Try demo [email protected]

Built by

AgentFaKtory

Enterprise AI and data engineering — agentic systems, cloud infrastructure, and intelligent workflows for regulated industries.

Visit agentfaktory.ai →