Sealed at rest
Every record is sealed before it touches a disk. The seal opens only with a key that lives on your devices.
AES-256-GCM · per-record key
A calm, deliberate enclosure for everything you choose to keep private.
penclo treats your information the way an old vault treats valuables: thick walls, quiet hinges, and one key that belongs only to you. There is no rush, no urgency, no dark pattern asking you to trade more for less.
We are an enclosure — a calm container for the parts of your digital life that deserve to stay yours.
Every record is sealed before it touches a disk. The seal opens only with a key that lives on your devices.
AES-256-GCM · per-record key
Your data is wrapped before it leaves your device and unwrapped only on the other side. The wires never see plaintext.
TLS 1.3 · X25519 · ChaCha20
We hold opaque envelopes. We cannot read them, cannot index them, cannot hand a copy to anyone — including ourselves.
zero-knowledge · client-side
When you first open penclo, a master key is generated locally and wrapped with your passphrase. It never leaves the device unencrypted.
Every entry is encrypted with a fresh per-record key, then that key is wrapped by your master key. Compromise of one record never reveals another.
Sealed envelopes travel to penclo's storage. We receive opaque ciphertext, hold it, and hand it back only to a session that proves it has the key.
Decryption happens inside your browser or app, in memory, and never on our servers. The seal opens for you and closes again after you look away.
AES-256-GCM
Argon2id · m=64MiB t=3 p=1
X25519 ECDH
TLS 1.3 · HSTS · pinned
ciphertext + opaque metadata only
independent · annual · published
Last audit cleared 2026-02-14 — report archived in our seal vault.
Reserve your handle. We will write to you when the seal is ready — once. No newsletter, no follow-up, no reminders.