Security & compliance

What a security reviewer sees.

VellumDoc performs no network communication for document processing or licensing. No content, usage data or telemetry is transmitted at any time. This isn't a setting — it's the architecture.

The claim, and why it holds.

No network code for documents

The application has no code path that uploads, syncs or transmits your files. Processing happens entirely on the local processor.

Verified redaction

Text under a redaction is stripped from the file itself and re-checked to confirm it's gone — not hidden behind a black rectangle.

Encrypted local state

Licence and application state are held in AES-256-GCM encrypted storage, keyed per install so a copied state file can't be reused elsewhere.

Cryptographically signed licensing

Licences are Ed25519-signed files verified with local mathematics. The app holds only the public key and cannot forge or phone home to validate.

Deployment postures we support.

Standard offline

Installed on managed or personal machines; runs with no outbound connections for document work.

Air-gapped

Fully isolated networks. Activation happens off-machine and the signed licence is carried in — the protected endpoint never touches the internet.

On-premise licence server (optional)

For enterprises that want licence management inside their own perimeter, with no vendor dependency at activation time.

Security documentation and a written architecture overview are available under NDA for procurement and security review. Request the security pack →

For your reviewers

Send us your security questionnaire.

We'll complete it, provide the architecture overview, and walk your team through the offline model.

Contact us