Filum

A zero-knowledge vault

Your documents,
cached and sealed.

Filum files the documents you can't afford to lose — passports, IDs, records — with on-device AI, then seals them with zero-knowledge encryption. They never leave your iPhone unencrypted. No one can read them. Especially not us.

What you see

The Filum vault on iPhone: 33 documents, end-to-end encrypted — a Recent row holding a birth certificate, a vet record and a residence permit, above a library sorted into Identity & Travel, Pet Records, Financial, Housing, Medical and Legal & Admin.
What our servers hold A3F9C2·7E14·B0E8·E17B

On-device intelligence

It files itself.

Snap a document and Filum reads it with Apple's on-device AI — sorting it by type, pulling out the dates and numbers that matter, and making everything searchable. The intelligence runs entirely on your iPhone. Our servers never see a word of it.

Filum importing eight documents: a lease agreement, a bank statement and a passport already typed with a confidence rating and field count, a second bank statement mid-extraction, four more queued.

Sorted automatically

Filum recognizes a passport, a lease, a tax form — and files it by type the moment you scan it.

On screen: scanning documents on your device — every file typed as it lands, with a confidence rating and a field count.

A residence permit open in Filum, tagged PERMIT and set to renew in a year, with nine extracted fields listed beneath it: date of expiry, issuing country, date of birth, full name, permit type and nationality.

Key fields, extracted

Numbers, names, and expiry dates are pulled out and structured — a document becomes data you can act on.

On screen: nine fields lifted off a residence permit — expiry date, issuing country, permit type.

Filum’s Radar screen: an urgent card counting 0 days on a passport, warning that many destinations require six months’ validity remaining; below it, renewals grouped into This week and Later this year — an insurance card, a visa and home insurance.

Expiry radar

Filum tracks renewals — passports, visas, residence permits — and warns you before they lapse.

On screen: a passport at 0 days — Filum counts to the Schengen six-month rule, not the date printed on the document.

Searching “Daniel” in Filum: 21 matches across 28 documents — a residence permit, driver’s licence, passport, visa, birth certificate, medical record and marriage certificates — under a header reading “28 documents · on-device only”.

Instantly searchable

Full-text search across your whole vault, right on your device — even offline.

On screen: 21 matches for “Daniel” across a whole vault — 28 documents · on-device only.

How your key works

Encryption happens on your device.

Every file is encrypted with AES-256-GCM on your iPhone before it syncs. We store only ciphertext — a server breach exposes encrypted blobs, never your documents.

  1. 01 Your file, on your iPhone
  2. 02 Sealed with AES-256-GCM · keys never reach our servers
  3. 03 We store only ciphertext
Filum confirming “8 documents added to Vault — Encrypted on this iPhone and filed away”, each document listed with AES-256-GCM · synced & backed up and its ciphertext size.

Every import ends the same way

Each file is sealed with AES-256-GCM on your iPhone, then synced as ciphertext. The only thing that leaves your device is a blob and its size.

On screen: Encrypted on this iPhone and filed away — with the cipher and byte count on every document.

Only you hold the key

Your keys are derived on your iPhone, in the Secure Enclave, and never sent to us. The one way back into your vault is a 24-word recovery phrase — yours alone. We can't recover it for you, and that's exactly the point.

Sealed before it syncs

Documents are encrypted on your device before they ever reach us. Nothing leaves your iPhone unencrypted.

Yours to keep

Export your whole vault any time. No lock-in, no hostages.

256 bit

AES-256-GCM authenticated encryption, with a fresh key for every document.

Zero-access by design

What we can't see.

End-to-end means the vault is sealed before it reaches us — including its filenames, types, and fields. Here's exactly where that line falls, and the little we do see.

Capability You US
Read your documents Yes Never
See filenames, types, or fields Yes Never
Hold your encryption key Yes Never
See blob sizes & sync times Yes
Inspect the crypto core Yes Yes

The only thing our servers ever hold is ciphertext plus the sizes and timestamps needed to sync it — never your document content or metadata.

Keep what matters, sealed.

Filum is in open beta for iPhone. Join on TestFlight and start sealing your documents today.

Download beta on TestFlight