Document Explainer analyses legal, official, and financial documents and gives you a plain-language summary, flags the risks, and tells you exactly what to do next.
Works with all kinds of documents
Your file is encrypted in your browser using AES-256-GCM before a single byte leaves your device. Only the encrypted version is uploaded — we never receive your document in readable form.
Your encrypted document enters a processing queue (BullMQ). When your turn comes, it is decrypted in server memory only — never written to disk — sent to an AI model for analysis, and the result is immediately re-encrypted under your key.
Your encrypted analysis is delivered back to your browser and decrypted locally using your key. The server deletes all processing credentials after the job completes.
Any legal, official, or financial document translated into clear, jargon-free language you can actually understand.
Automatically flags clauses, obligations, deadlines, and terms that could put you at a disadvantage.
Actionable recommendations after every analysis — know exactly what your next step should be.
Every document you've ever uploaded, with its analysis, stored securely in your personal dashboard.
Submit a document and go offline. BullMQ queues your job and processes it when ready. Your encrypted result waits securely until you return.
Documents are decrypted and analysed in server RAM. No plaintext is written to disk at any stage — not even temporarily.
Your document is encrypted in your browser using AES-256-GCM — derived from your password via PBKDF2 — before upload begins. Our servers process your document in memory only, then permanently delete all processing credentials. What we store is ciphertext. Only you hold the key to read it.
AES-256-GCM encryption runs entirely in your browser via the Web Crypto API. Your key is derived from your password using PBKDF2 (310,000 iterations). The raw key is non-extractable — the browser itself prevents it from being exported.
For queued jobs, your session key is temporarily wrapped with our RSA-OAEP public key. The server decrypts your document in RAM, runs analysis, re-encrypts the result, then permanently deletes the wrapped key. No plaintext touches disk.
Encrypted blobs are stored temporarily on AWS S3 (eu-central-1) and are subject to AWS data retention policies. We store your ciphertext, IV, and job metadata — never plaintext. Every decryption event is logged with timestamp and document hash.
We believe vague "bank-level security" claims help no one. Here is exactly what lives on our servers.
Join the waitlist and get early access free of charge.