A deep dive into the technology that makes oh·my·doc the most private document manager available.
Every document, every file name, every tag, and every search term is encrypted with AES-256-GCM before it leaves your device. The server stores only opaque ciphertext. Even if someone gains full access to the server and database, they see nothing but random bytes.
Text recognition happens entirely on your device. In the browser, Tesseract.js (WASM) processes your PDFs page by page. On iOS, Apple's Vision framework handles it natively. The extracted text is encrypted and stored as part of your search index — the server never sees a single word.
Invite others to your encrypted spaces using X25519 cryptographic key exchange. The space's decryption key is encrypted specifically for each recipient's public key. The server facilitates the exchange but never sees the key in plaintext. Set granular permissions per member.
At registration, you receive a BIP39 mnemonic — 24 words that encode 192 bits of entropy. If you ever forget your password, these words let you derive a recovery key to decrypt your private key and set a new password. No server-side reset. No admin intervention. You hold the keys.
A purpose-built SwiftUI app with a built-in document scanner. Point your camera, and the app handles edge detection, perspective correction, and color optimization. Review your scans, reorder pages, then convert to PDF — all on-device. OCR runs through Apple's Vision framework. Encrypt and upload in one tap.
Search across all your documents, tags, correspondents, and OCR text — instantly. Powered by Orama, an in-memory search engine that runs entirely in your browser. Relevance-boosted results with contextual snippets. The server never knows what you're looking for.
Organize documents with encrypted tags and correspondents. Create custom views with saved filters and sorting. Everything is stored in encrypted space metadata — the server sees only ciphertext. New uploads are automatically tagged as Inbox, so nothing gets lost.
Efficient delta-based synchronization keeps your devices up to date. Only changed entries are transferred, each with a version number. The backend is always the source of truth. Local IndexedDB stores decrypted copies for instant search and display.
Start for free. No credit card required.