A Lock is a secure upload link. Anyone with the link can send you files, and only your team can open them, using the Lock's password. You can make one for each client, or a general one for a kind of document, such as "Health records". You can also put a Lock's link on your website, so anyone can send you files such as business proposals.

What are smart forms?

Forms you design yourself, with sections and questions such as text, dates, choices and file uploads. Attach one to a Lock and clients fill it in instead of just sending files. The answers are encrypted on their device like everything else, and you can open them in your dashboard or save them as a PDF. Forms are included on every plan.

Do my clients need an account?

No. Clients open your link on any phone or computer, fill in the form or add files, and press send. Afterwards they get a private link to follow the progress and read your replies.

How does encryption work?

Everything is encrypted in the client's browser before it is sent: files, file names, form answers and messages. We only store encrypted data, and only your Lock password can unlock it.

What if your servers are hacked?

Client files and answers stay encrypted. Without your Lock password they cannot be opened, by an attacker or by us.

Can we show who accessed a file?

Yes. Owners and admins have an activity log of uploads, downloads, comments, sign-ins and setting changes, with who, when and from where. It is sealed daily in storage that cannot be altered, so any change would show, and you can give an auditor a report they can verify themselves.

How much does it cost?

Starter is free with 1 GB of storage. Standard is £29/month with 50 GB. Premium is £59/month with 200 GB. Forms, the activity log and offline packages are on every plan, and every plan accepts uploads of up to 500 MB.

How do I get started?

Sign up, verify your email, log in, and create a company from your dashboard. Your first Lock takes a minute.

Customer documents. One clear process.

Stop chasing documents.Cut admin costs.

One secure link for customer documents, with every file in its place. Your team knows what’s next, and customers see progress without calling.

Start free See how it works

No customer account needed
Works on phone & desktop
Encrypted before it’s sent

ONE PLACE. FROM REPLY TO DONE.

CUSTOMER DOCUMENTS

New customer onboarding

In progress

Alex TaylorAll requested documents received

Photo ID

Proof of address

Your team’s workflow1 of 3 done

RecordJamie · done
2
CheckSam · up next
3
CompletePriya

Illustrative example · fictional data · workflows on Premium

SOUND FAMILIAR?

Collecting documents
shouldn’t be a second job.

Most of the time doesn’t go on the work itself. It goes on chasing, sorting, forwarding and answering the phone.

“We’re still waiting for one document.”
Reminder emails, second requests and work that can’t start until the last file arrives.
With Renvelock: Forms with required questions, so submissions arrive complete.
“Which email was that attachment in?”
Replies split across email, WhatsApp and shared drives, then saved and renamed by hand.
With Renvelock: One submission per customer, with every file next to the question it answers.
“Hi, just checking on my application…”
Calls and emails that interrupt your team, only to hear that it’s in progress.
With Renvelock: A private progress link where customers see what’s done and read your replies.
“Sam’s off today. Who has this?”
Work waits in one person’s inbox, and nobody else knows where it’s up to.
With Renvelock: A shared view for your team, with steps you can reassign in a click.Team access on Standard · workflows on Premium
“Is it safe to email my passport?”
Copies of IDs and bank statements left in inboxes, sent folders and backups.
With Renvelock: Encrypted on the customer’s device before it’s sent, and deleted on schedule.
“Who downloaded this file?”
When a customer or an auditor asks, there is no reliable answer.
With Renvelock: A tamper-evident record of every upload, download and change.

HOW IT WORKS

One link in. A clear path forward.

Team access on Standard and Premium.
Assigned workflows on Premium.

YOUR BUSINESS

Let’s get your documents sorted.

Please attach the documents below.

Full nameAlex Taylor

Photo ID Required

photo-id.pdf

Proof of address Required

address.pdf

Ready to send securely

Illustrative example with fictional data

SAVINGS

Your team’s time
has a price.

Chasing, sorting and progress calls add minutes to every submission. Win those minutes back and you gain capacity before you need to hire.

See plans and pricing

What could less chasing save you?

Try your own numbers.

Customer submissions per month

Minutes you could save per submission

Your hourly staff cost (£)

Potential monthly staff time value£500

25 hoursof capacity freed up

An illustration based on your inputs, before subscription costs. Time freed up is not necessarily a reduction in payroll.

SECURITY

Safer than email.
Still yours after download.

Email leaves copies of IDs and bank statements in every inbox they pass through. Renvelock encrypts files and answers on the customer’s device before they are sent, so only your team can open them. Not even we can.

OFFLINE STORAGE

Downloaded shouldn’t mean exposed.

Keep an encrypted offline package on your own storage. It stays locked until opened with the Lock password.

Ordinary file and PDF exports are readable copies.

ACCESS CONTROL

Private cases stay private.

Give confidential or VVIP cases a separate Lock password. Share it only with the people who should open those files.

Team roles control who can manage your workspace.

ACCOUNTABILITY

Know who downloaded what.

See who downloaded documents and changed records. Tamper-evident logs make later edits detectable, with verifiable reports.

Recorded platform activity; not tracking of copies outside Renvelock.

WHO IT’S FOR

Built for teams trusted
with private documents.

Anywhere customers send documents you have to keep safe: legal, health, finance, HR, property and insurance.

More time
for customers.

Give customers one place to reply, and your team a clear way forward. Start free, with no credit card required.

Start free Compare plans

An adviser giving a customer her full attention across a tidy office desk.

FOR THOSE WHO WANT TO LOOK UNDER THE HOOD

Technical details · encryption, storage & verification

Files, filenames and form answers are encrypted on the customer’s device before upload. Lock passwords stay on your device. Operational data, including comments and workflow information, is not end-to-end encrypted.

Cryptographic algorithms

Renvelock uses industry-standard algorithms: AES-256-GCM for content encryption and RSA-OAEP (4096-bit) for key wrapping, via the browser Web Crypto API, and Argon2id (64 MiB of memory, 3 passes) to turn your Lock password into a key. Argon2id needs a large amount of memory for every guess, which makes guessing passwords from stolen data slow and expensive, even with specialised hardware.

Unique key per upload item

Each piece of data — upload metadata, file content, and filename metadata — gets its own AES key and IV. Compromising one encrypted item does not expose other uploads.

Account password vs Lock password

Your account login password is separate from your Lock password. Account authentication is handled server-side. Lock passwords exist only on the client and protect your encryption keys.

What if Renvelock is completely hacked?

A full breach that exposes our database and cloud storage would still not leak readable client files. Attackers would obtain encrypted data, wrapped keys, and your RSA private key (still locked with your password) — but not your Lock password. File content remains protected unless someone can guess or obtain that password.

Your Lock password determines practical security

Cryptography protects stored files even when servers are compromised, but the real-world security level follows your password strength. A long, unique Lock password makes offline attacks against stolen encrypted data impractical. A weak or reused password is easier to guess, which is why Renvelock requires at least 12 characters, refuses common and predictable passwords, and can generate a strong one for you. Treat your Lock password like the key to a safe — the stronger it is, the safer your files remain after any breach.

Billing and payments

Paid plans are billed through Stripe. Card numbers, billing addresses, and other payment credentials are collected and stored by Stripe — not on Renvelock servers. We only receive the subscription status and plan information needed to enable your account features.

Lost Lock password

If you lose your Lock password, encrypted files cannot be recovered — including by Renvelock. This is intentional: true end-to-end security means only you hold the key.

Encrypted client-side

File contents
Filenames and file metadata (size, last modified)
Upload metadata (sender name, reference, message)
Form answers, and the files attached to each question
RSA private key (stored encrypted; only you can decrypt it with your Lock password)

Stored without file-level encryption

Lock notes and customer messages set by your business
The questions of forms you design (the client's page must show them); never the answers
Comments, flags, pins and activity logs on uploads
Company codes, lock IDs, upload counts, and timestamps
Account email, name, and subscription plan status

Payment details — handled by Stripe

Credit card numbers and payment credentials
Billing address and tax details entered at checkout
Invoices and payment method updates (via the Stripe customer portal)

Renvelock does not receive or store this information. Stripe is a PCI-compliant payment processor used for checkout and subscription management.

How the activity record is verified

Everything that matters

Uploads, downloads, deletions, comments, flags, sign-ins, team and setting changes, with IP address and device. Kept for 3 years, even after the files are gone.

Chained entries

Each entry includes a fingerprint of the one before it. Editing, removing or inserting an entry breaks the chain.

Sealed every day

Each day the latest fingerprint is stored where it cannot be changed or deleted for the whole retention period — not even by us.

Checked, and checkable

The log is checked every night. Download an integrity report, and anyone, such as an auditor, can verify it on our public page.

Verify an activity report