Skip to content
FOLIO // 03 · VAULT & REVERSIBLE SESSION STORAGE

Store the redacted version. Never the raw starting point.

Vault begins after human review. It keeps processed redaction sessions, tokenised pseudonymization maps, and cryptographic audit trails ready for AI and team workflows.

LOCAL INDEXEDDB / ENCRYPTED VAULT
ZERO RAW CLOUD INGESTION
SHA-256 AUDIT LOGS
VAULT SESSION // MAT-2026-0884ENCRYPTED // AES-GCM
REDACTED WORKING COPY (CLICK ANY TOKEN TO JUMP TO MAP)
[CASE BRIEF // MAT-2026-0884]
Parties: [PERSON_1]Mapped: AES-GCM Protected (Click to View) (Appellant) vs [COMPANY_1]Mapped: AES-GCM Protected (Click to View) (ABN: [ABN_1]Mapped: AES-GCM Protected (Click to View))
Jurisdiction: Federal Court of Australia, Melbourne VIC [POSTCODE_1]Mapped: AES-GCM Protected (Click to View)

STATEMENT OF PARTICULARS:
On [DATE_1]Mapped: AES-GCM Protected (Click to View), [PERSON_1]Mapped: AES-GCM Protected (Click to View) tendered payment of AUD $4,850 via account [BANK_ACCOUNT_1]Mapped: AES-GCM Protected (Click to View) (BSB: [BSB_1]Mapped: AES-GCM Protected (Click to View)) for execution of Project Apollo under consulting agreement verified by Dr. [PERSON_2]Mapped: AES-GCM Protected (Click to View) (AHPRA: [AHPRA_1]Mapped: AES-GCM Protected (Click to View)).

CURRENT STATUS: Sanitised for AI legal analysis and team audit.
VAULT LIFECYCLE & BOUNDARY

Four Steps. One Human Gate.

Vault enforces a strict security boundary: only documents that have been reviewed and transformed into sanitised tokens can ever be retained.

STEP // 01

LOCAL INGESTION & SCAN

Original sensitive values stay strictly inside browser memory during client-side pattern matching and OCR.

STEP // 02

HUMAN APPROVAL GATE

Every detected candidate is reviewed and approved by the operator before any persistence occurs.

STEP // 03

CLIENT-HELD TOKEN MASKING

Vault maintains the sanitised document copy alongside a secure, client-controlled pseudonymisation map.

STEP // 04

DOWNSTREAM SAFE HANDOFF

Only reviewed, redacted context is transmitted to AI assistants, internal databases, or team members.

STORED AFTER HUMAN APPROVAL

What The Vault Retains

Vault stores the sanitised working session so teams can resume, collaborate, and hand off to AI models with zero data-leak risk.

  • Redacted session content & working tokens
  • Isolated, encrypted token replacement dictionary
  • Entity classification counts & reviewer annotations
  • SHA-256 cryptographic proof & tamper-proof timestamps
  • Configurable 30-day team auto-purge lifecycle
STRICT EXCLUSION BOUNDARY

What Vault Never Stores

Vault is not general-purpose raw file cloud storage. It rejects unreviewed payloads to maintain zero-liability data sovereignty.

  • Raw, unredacted source documents
  • Plaintext credit cards, TFNs, or Medicare numbers
  • Unencrypted third-party cloud database records
  • Permanent unmanaged document hoarding
  • Training data for public foundational AI models
ENTERPRISE & LEGAL ADAPTABILITY

Continue Work from Redacted Material

Designed for high-compliance Australian and global industries operating under strict confidentiality mandates.

Legal Litigation & Briefs

Store processed versions of discovery exhibits, witness statements, and client correspondence ready for external review and AI analysis.

Clinical & Patient Intake

Safely retain reviewed referral letters, medical histories, and Medicare claims without holding identifiable health records.

HR Records & Incident Notes

Preserve sanitised employee reviews, grievance documents, and compensation models after names, TFNs, and salaries are tokenised.

LLM & AI Assistant Ingestion

Feed sanitised documents into Claude, ChatGPT, or internal RAG models with the ability to safely re-identify on return.

READY FOR WORKSPACE DEPLOYMENT

Keep the context. Protect the identity.

Start with our free in-browser PII scanner, or configure team vault storage for your entire organisation.