Encrypted the moment it arrives
Every document and every note, and also the names of your files, your folders and your contacts.
Security
Your information, protected. And we tell you how.
What you store in Anuxis is encrypted the moment it arrives, and it only reaches the people you name, when you decide. Here we explain how it works under the bonnet, what we can and can’t see – and also what we can’t promise you. No small print.
In three sentences
The essentials
Only the people you name receive it
Each person confirms their email and mobile, and needs both to download.
We tell you what we see and what we don’t
And what we do so that nobody opens what they shouldn’t.
Inside, without the jargon
A key for each document, and three safes
Every document you upload is encrypted with its own key, different for each file. Without that key, what’s stored is just a jumble of meaningless data. That key isn’t stored as it is: it’s stored wrapped, like a key locked inside a safe. And there are three safes, each with its own combination.
-
Your safe
It opens with a key derived from your password. It’s the one you use every day to see your documents.
-
Each trusted contact’s safe
It opens with a key derived from their confirmed email and mobile. Each person has their own, and it only holds the keys to the documents you assigned to them: one can never open another’s.
-
The Anuxis safe
It opens with a key of ours, which lives on the server, outside the database and outside the backups. It exists for two reasons, and we explain them further down.
What’s protected
What’s protected, and how
Your documents and notes
With AES-256 encryption, the standard used by banks and governments.
The names
Of your files, your folders and your trusted contacts, along with their emails and phone numbers. Nowhere in the database does it show in plain text what each document is or who it’s for.
Delivery
Whoever receives it has to open the link in their email and enter the code sent to their phone. With only one of the two, nothing opens.
Your account
Protected by a password and, if you wish, by two-factor authentication with an authenticator app. When someone signs in from a new browser, we let you know.
The activity log
Who accessed what, and when, in a chained log that can’t be rewritten without it showing.
Where everything is kept
On servers in the European Union. Backups are encrypted and stored with Backblaze, also in the EU, locked against deletion for 30 days: not even we could delete them early.
No small print
What we see, and what we don’t
What we do see
- Your name, email and phone number.
- Your billing details.
- How you’ve set up each delivery: which method, which time limits.
- The activity log: when someone logs in, uploads or downloads.
What we don’t open
- The contents of your documents.
- Your secure notes.
- There is no feature, not even in our admin panel, that allows them to be opened.
If someone from support goes into your account to help you, they see your screens as you see them: the names of your folders, your files and your contacts. What they can’t do is open or download anything, deliver anything, or change your details or your contacts. We email you at that very moment, with their name and the reason, and it’s recorded in your activity log.
On purpose
Why we’re not “zero-knowledge”
Some services boast that not even they can open what you store. It sounds great, but it has two consequences we don’t want for you at Anuxis.
Nobody could deliver your folders on the day you can’t
If the only key were yours, then on the day you can’t type your password – which is exactly the day you signed up for this – nothing would reach anyone.
Forgetting your password would mean losing everything
For good, with no way back. At Anuxis you recover it from your email, and your documents are still there.
That’s why we keep a key, on the server, separate from the data and from the backups. The consequence, put plainly: the system protects your documents if someone steals the database, gets into the disks or makes off with a backup, but it couldn’t protect them from an attacker who took control of our server while it’s running. We’d rather tell you this straight than sell you a word that doesn’t hold up.
Your trusted contacts
They see nothing until it reaches them
They know you’ve chosen them, because we tell them. But they can’t see which documents there are, or their names, or when you log in or what you change. They can’t get into your account.
On the day it reaches them, they receive only what you assigned to them, and to open it they have to prove it’s them: the link in their email and the code on their phone.
The question almost nobody answers
What if Anuxis closes down?
For a service like this, it matters. If Anuxis ever stopped providing the service, we would give you at least a year’s notice, stop renewing subscriptions, and every account would have its usual period to download everything before it closed.
1 year
of notice, by contract
30 days
to download, after each expiry date
It isn’t a promise made on this page: it’s in clause 16 of the Terms, signed by Surfer Koala S.L., the company that invoices you.
The hard questions
They would get encrypted files and encrypted names. The Anuxis key isn’t in the database or in the backups, so with that alone they couldn’t open anything. What would be exposed is your customer record: name, email, phone number and billing details.
That’s the case we can’t rule out, and we won’t tell you otherwise: it’s the trade-off for delivery working without you. We make it hard – the key lives separately from the data and every access is logged – but not impossible.
We comply with the law. Because we manage the keys, a valid court order could reach the contents, not just the account details. No service that can deliver your documents without you can promise you otherwise.
No. Your account data is used to provide the service and to invoice you. Your trusted contacts’ data is used only to tell them they’ve been chosen and to make their delivery. We don’t sell it or pass it on.
No. No artificial intelligence system reads what you store in Anuxis.
Yes. Our privacy policy sets out what data we process, why, on what legal basis, who we share it with and for how long. And the Terms set out what we’re bound by.
Peace of mind, with your eyes open.
Try it for 30 days and look under the bonnet.
No card · Cancel anytime
Any other questions?
Write to us and a person will reply, not a robot. You can also email info@anuxis.com.