DocuVault Documentation

How to read this document

Sections move from purpose → concepts → calculation process → worked examples → edge cases. Formula boxes use plain mathematical notation for clarity; they are conceptual summaries, not API contracts.

• Point lists call out operator-visible behaviour.
• Callouts mark warnings, limitations, or important qualifications.
• Worked examples use round numbers so you can reproduce the arithmetic by hand.

Purpose

DocuVault stores and organizes household documents behind account, household, permission, and vault controls. Encryption reduces exposure but does not eliminate every risk.

• Upload and classify supported documents
• Restrict access to intended members
• Protect document content with authenticated encryption
• Keep recovery and device security in mind

Protection boundary

DocuVault is designed to protect document content in storage and transit within the product architecture. Endpoint compromise, authorized-user misuse, screenshots, exports, weak accounts, and metadata exposure remain distinct risks.

AES-GCM envelope concept

At a high level, document content is protected using an envelope pattern: a data-encryption key protects content with AES-GCM, while separate key-protection controls protect the data key. Authenticated encryption detects content or authentication-tag tampering.

• A unique nonce is required for an encryption context.
• Associated context can bind relevant metadata without encrypting it.
• Key wrapping separates content keys from higher-level key protection.
• Public documentation intentionally omits operational key material and sensitive parameters.

Why this is not an unqualified zero-knowledge claim

AccountHouse does not make an unqualified claim that the service can never access plaintext under any circumstance. Product workflows may require authorized server or client components to process decrypted content, depending on implementation and user action.

Metadata caveat

Encryption of document bytes does not imply that all metadata is encrypted. Operational records may include identifiers, household ownership, file size, format, timestamps, labels, access events, or status needed to run the service.

• Minimize sensitive filenames and labels.
• Assume metadata can reveal context.
• Do not place secrets in tags.
• Review exports and notifications for metadata exposure.

Access control

Authentication establishes account identity; household and vault permissions determine allowed actions. Encryption does not replace authorization.

• Invite only intended members.
• Apply least privilege.
• Review role and client permissions.
• Revoke access promptly.
• Protect administrator accounts with stronger controls.

Upload and classification

• Supported limits can vary.
• Malformed or unsafe files may be rejected.
• Uploading does not certify authenticity or legal validity.

View, download, and sharing

Viewing requires authorized decryption. Downloading creates a copy outside DocuVault controls; its storage, backup, sharing, and deletion become the user's responsibility.

Mobile use

• Use device lock and supported app lock.
• Avoid untrusted or shared devices.
• Keep the operating system updated.
• Review downloaded-file locations.
• Revoke lost-device sessions.

Recovery and availability

Account recovery and encryption recovery are security-sensitive processes. Exact behavior depends on the configured architecture and may limit what can be restored.

Deletion and retention

Deletion removes access through normal product flows subject to applicable retention, backup, legal, and operational processes described by policy. It should not be described as instantaneous physical erasure from every medium.

Integrity and authenticity

AES-GCM authentication helps detect encrypted-content tampering under the correct key and context. It does not prove the source document was genuine, current, signed by an authority, or legally admissible.

Security response checklist

Safe-use checklist

• Store only what is necessary.
• Redact excess identifiers.
• Use clear least-privilege roles.
• Maintain independent backups.
• Test retrieval.
• Review access periodically.
• Never share unlock secrets in document notes.

Privacy, advice limits, and what we do not publish

AccountHouse is a household tracking and organisation tool. It is not a bank, payment processor, tax advisor, or investment advisor. Forecasts, health scores, balances, and alerts are informational.

• Household data is scoped to your household; other families cannot see your ledger.
• Public documentation explains product behaviour and calculation concepts, not proprietary internals.
• Exact scoring weights, anomaly thresholds, cryptography parameters beyond high-level algorithms, and operational detection rules are reserved.
• Encrypted content can coexist with operational metadata; users should not assume filenames, sizes, labels, or timestamps are confidential.
• Public documentation does not expose keys, nonce-generation internals, infrastructure topology, or recovery secrets.