Stop emailing passports, tax returns, and sensitive records. TesseraVault encrypts every file on your client's device before upload — not even we can read them. Only you hold the key.
Free to start. No credit card required.
Every day, immigration attorneys, accountants, and other professionals receive passports, social security cards, and financial records over unencrypted email. One breach can compromise hundreds of clients.
Standard email sends documents as plaintext. They pass through multiple servers, any of which could be compromised or surveilled.
A single breach exposes your business to legal claims, regulatory fines, and irreparable damage to client trust.
Clients share their most sensitive identity documents — passports, birth certificates, financial records, and medical files deserve better than an email attachment.
Replace email attachments with an encrypted portal your clients can use in minutes.
Specify which documents you need — passports, I-94s, tax returns, contracts. TesseraVault generates a unique, secure link for your client.
Your client opens the link and drops in their files. Each file is encrypted with AES-256 right in their browser — before anything leaves their device.
Log in to your dashboard and download the files. Decryption happens locally with your private key — no one else can ever access the originals.
Purpose-built for immigration attorneys, accountants, and professionals who handle sensitive client information every day.
Files are encrypted with AES-256-GCM in the client's browser before upload. The plaintext never touches our servers.
Your encryption keys never leave your device. We literally cannot decrypt your documents, even if compelled by a court order.
Add team members to your organization. Each member gets their own encryption keys — revoke access instantly when someone leaves.
Clients just open a link and upload. No app to download, no account to create. Works on any device with a web browser.
Create document requests per client or per case. Track which documents have been submitted and which are still outstanding.
Documents are stored encrypted at rest on isolated infrastructure. Even our storage provider only sees encrypted blobs.
General-purpose file sharing wasn't designed for sensitive documents. See how purpose-built security stacks up.
| Feature | TesseraVault | Dropbox | Box | SharePoint | |
|---|---|---|---|---|---|
| Client-side encryption | ✓ | ✗ | ✗ | ✗ | ✗ |
| Zero-knowledge architecture | ✓ | ✗ | ✗ | ✗ | ✗ |
| No client account needed | ✓ | ✗ | ✗ | ✗ | ✓ |
| Built for sensitive professions | ✓ | ✗ | ✗ | ✗ | ✗ |
| Per-file unique encryption keys | ✓ | ✗ | ✗ | ✗ | ✗ |
| Provider can read your files | Never | Yes | Yes | Yes | Yes |
| Document request tracking | ✓ | ✗ | ✗ | ✗ | ✗ |
| Recovery phrase backup | ✓ | N/A | N/A | N/A | N/A |
| Compliant by design | ✓ | Partial | Partial | Partial | ✗ |
Dropbox, Box, and SharePoint encrypt files at rest on their servers — but their employees and systems can still access your data. TesseraVault encrypts before upload, so nobody but you can ever read the files.
TesseraVault uses the same encryption standards trusted by governments and financial institutions. Our code is open for audit — you don't have to take our word for it.
// 1. Client picks file
const file = document.pdf
// 2. Generate unique file key
const fileKey = crypto.randomBytes(32)
// 3. Encrypt file in browser
const encrypted = AES256GCM.encrypt(file, fileKey)
// 4. Wrap key with recipient's public key
const wrappedKey = RSA_OAEP.encrypt(
fileKey, recipientPublicKey
)
// 5. Upload encrypted blob + wrapped key
upload(encrypted, wrappedKey)
// Plaintext never leaves the client's device
Start free. Upgrade when your business grows.
For consumers
For freelancers & sole practitioners
14 days free, no credit card required
For small-to-mid firms
14 days free, no credit card required
For large organizations
It means we have zero knowledge of your documents. Files are encrypted on the client's device before they reach our servers, and only you hold the decryption key. Even our engineers cannot access your files.
No. You send them a secure link. They open it, select their files, and upload. The encryption happens automatically in their browser. No accounts, no apps, no friction.
During onboarding, you receive a 12-word recovery phrase (BIP-39 standard, the same technology used by cryptocurrency wallets). Store it somewhere safe — it can regenerate your encryption keys if you ever lose access.
TesseraVault's zero-knowledge architecture exceeds most compliance requirements because we never have access to unencrypted data. That said, compliance depends on your overall practice — we recommend consulting with a compliance professional for your specific situation.
Yes. With the Business plan, you can add team members to your organization. Each person gets their own encryption keys, and file keys are securely wrapped for each authorized member. You can revoke access at any time.
Any file type your client can upload — PDFs, images (JPEG, PNG), Word documents, scans, and more. Since we encrypt files as binary data, the file type doesn't matter.
Join immigration attorneys, accountants, and professionals who have switched from email to encrypted document collection. Set up takes less than 5 minutes.
Get Started Free