document rights management

Send the document. Keep the control.

Vaultline replaces attachments with policy-bound links. The PDF stays encrypted on your server; recipients get a watermarked, view-only window that you can expire, limit to specific devices, or revoke at any moment.

Open the admin portal

recipient  →  authenticate
              ↓
           policy check   (authorised? expired? revoked? device allowed?)
              ↓
           short-lived viewing session
              ↓
           watermarked page rendered
              ↓
           audit event written

What each policy enforces

Encrypted at rest

Every file is sealed with its own AES-256 key. The original bytes never leave the server.

View only

Pages are delivered one at a time. No download, no print, no copy, no text layer to scrape.

Dynamic watermark

Recipient email, timestamp and IP are burned into every page as it is served.

Device limits

Each recipient is bound to a fixed number of registered devices.

Expiry

Set a date and the link stops working, wherever it has been forwarded.

Instant revoke

One click ends access on the very next page request.

Audit trail

Opens, page views, denials, IP, browser, device and timestamp.

REST API

Upload, grant, revoke and export logs programmatically with scoped keys.

Honest limit: no browser viewer can stop a camera pointed at the screen. Watermarking and the audit trail make a leak traceable to one recipient, one device and one moment.