Deliver secrets securely
CifraVault is a zero-trust secret delivery platform. Share passwords, API keys, and sensitive data with encryption, access controls, automatic expiry, and a complete audit trail.
Built on Zero-Trust Architecture
Content is never stored in plaintext. Text secrets are decrypted on our servers for authorised reveal, while attached files are decrypted in the browser.
- AES-256-GCM with AWS KMS key management. Each secret gets a unique data encryption key, wrapped by a master key you control.
- Every secret has a configurable time-to-live. Once it expires the link stops working and access is revoked. What happens to stored content depends on the encryption mode — the Security page sets out each case. Metadata and audit entries are retained.
- Enable burn-after-read. The text payload is removed once the view limit is reached, and the text link stops working. Attached files keep their own lifecycle.
Multi-Channel Verification
Protect secret access with OTP verification. Choose the channel that fits your security posture — email, SMS, or authenticator app.
- One-time codes delivered to the recipient's email. Available on all plans.
- Verification codes via SMS with zone-based credit system. Available on Professional plans and above.
- Time-based codes via authenticator apps like Google Authenticator or Authy. No network dependency.
Everything You Need for Secure Delivery
CifraVault gives you the tools to share sensitive data with confidence, without compromising on security or usability.
EU data storage
Secret content, encryption keys and audit logs are stored on infrastructure in the European Union. Content delivery and payment processing also involve providers outside the EU under documented transfer safeguards.
Immutable Audit Trail
Every operation is logged with request ID, timestamp, actor, and outcome. Tamper-proof and queryable.
API-First Design
Full REST API with API key authentication. Automate secret delivery in your CI/CD pipelines and workflows.
Team Management
Create organisations, invite members, assign roles. Manage API keys and permissions per team.
Plan Enforcement
Usage limits enforced per plan — secrets, OTP, storage. Upgrade seamlessly when you need more.
Configurable Access Controls
Set time-to-live, maximum views, delivery method, and verification method per secret. Fine-grained control over every delivery.
Start delivering secrets securely
14-day free trial on the Starter, Professional and Business plans. No credit card required to start.