Filum

A zero-knowledge vault

Your documents,
cached and sealed.

Filum files the documents you can't afford to lose — passports, IDs, records — with on-device AI, then seals them with zero-knowledge encryption. They never leave your iPhone unencrypted. No one can read them. Especially not us.

What you see

The Filum vault on iPhone: four documents in a Recent row, then a library sorted into Identity & Travel, Pet Records, and Legal & Admin — footed by the line “Encrypted on this iPhone. Even we can’t read your documents.”
What our servers hold A3F9C2·7E14·B0E8·E17B

On-device intelligence

It files itself.

Snap a document and Filum reads it with Apple's on-device AI — sorting it by type, pulling out the dates and numbers that matter, and making everything searchable. The intelligence runs entirely on your iPhone. Our servers never see a word of it.

Filum importing five documents: national_id_card.pdf and passport.pdf already classified with high confidence, medical_record.pdf mid-classification, two more queued.

Sorted automatically

Filum recognizes a passport, a lease, a tax form — and files it by type the moment you scan it.

On screen: five files classified during import — encrypted on this iPhone before sync · zero network calls during analysis.

A warranty certificate open in Filum, with five extracted fields listed beneath it: product, brand and retailer, serial number, warranty end date, and purchase date.

Key fields, extracted

Numbers, names, and expiry dates are pulled out and structured — a document becomes data you can act on.

On screen: five fields lifted off a warranty certificate — product, serial number, the date the cover ends.

Filum’s Radar screen: a visa expiring in 5 months under “Later this year”, a warranty and a driver’s licence under “Beyond a year”, and per-category lead times for travel documents, pet records, and everything else.

Expiry radar

Filum tracks renewals — passports, visas, residence permits — and warns you before they lapse.

On screen: renewals grouped by how soon they land, each category with its own lead time.

Searching “Daniel” in Filum: two title matches and one match found inside a scanned warranty’s text, footed by “On-device FTS5 · 4 documents indexed · 0 network calls”.

Instantly searchable

Full-text search across your whole vault, right on your device — even offline.

On screen: a match found inside a scanned document — On-device FTS5 · 4 documents indexed · 0 network calls.

How your key works

Encryption happens on your device.

Every file is encrypted with AES-256-GCM on your iPhone before it syncs. We store only ciphertext — a server breach exposes encrypted blobs, never your documents.

  1. 01 Your file, on your iPhone
  2. 02 Sealed with AES-256-GCM · keys never reach our servers
  3. 03 We store only ciphertext
Filum confirming “5 documents added to Vault — Encrypted on this iPhone and filed away”, each document listed with AES-256-GCM · synced & backed up and its ciphertext size.

Every import ends the same way

Each file is sealed with AES-256-GCM on your iPhone, then synced as ciphertext. The only thing that leaves your device is a blob and its size.

On screen: Encrypted on this iPhone and filed away — with the cipher and byte count on every document.

Only you hold the key

Your keys are derived on your iPhone, in the Secure Enclave, and never sent to us. The one way back into your vault is a 24-word recovery phrase — yours alone. We can't recover it for you, and that's exactly the point.

Sealed before it syncs

Documents are encrypted on your device before they ever reach us. Nothing leaves your iPhone unencrypted.

Yours to keep

Export your whole vault any time. No lock-in, no hostages.

256 bit

AES-256-GCM authenticated encryption, with a fresh key for every document.

Zero-access by design

What we can't see.

End-to-end means the vault is sealed before it reaches us — including its filenames, types, and fields. Here's exactly where that line falls, and the little we do see.

Capability You US
Read your documents Yes Never
See filenames, types, or fields Yes Never
Hold your encryption key Yes Never
See blob sizes & sync times Yes
Inspect the crypto core Yes Yes

The only thing our servers ever hold is ciphertext plus the sizes and timestamps needed to sync it — never your document content or metadata.

Keep what matters, sealed.

Filum is in open beta for iPhone. Join on TestFlight and start sealing your documents today.

Download beta on TestFlight