Security

The trust primitive is provenance, not opinion

Kybex makes one narrow claim about your documents and makes it verifiable.

Every file is fingerprinted

Each upload is hashed with SHA-256 at the moment it arrives. The hash travels with the document, so a recipient can confirm the file they received is byte-for-byte the file you uploaded.

Versions, never overwrites

Re-uploading a document creates a new version. Earlier versions stay intact, which is what makes 'unaltered since this date' a statement we can stand behind.

Append-only chain of custody

Uploads, edits, shares, views and internal support access are all written to an event log that cannot be edited or deleted — including by the Kybex team.

Scoped sharing

A share carries only the documents and fields you selected. A share link resolves to that share and nothing else, and can be tracked, or superseded by a newer share.

Storage and access

Documents are held in private storage. Direct access is restricted to your own vault; recipients only ever receive short-lived download links issued per file.

Auditable internal access

When the Kybex team opens a business record for support, that access is written to the same chain-of-custody log you can read.