Home About VaultKeeper GovLens APIFold Manifesto Open Source Contact
Flagship v1.2.0 · AGPL-3.0 Operational

The evidence locker no foreign government can shut off.

Open-source, self-hosted evidence management for international courts, tribunals, and human rights investigators. Chain of custody that holds up in court.

Book an institutional demo → Tour the platform
AGPL-3.0 open source Self-host in 15 min Air-gap compatible Zero telemetry

38

Jurisdictions deployed

14.2M

Exhibits sealed

100%

Admissibility record

from €22k

Monthly, ICC-scale

Case file · live ICC-UKR-2024

Bucha drone footage

Evidence · 00:04:12 · 218 MB

Sealed

Witness W-0144 testimony

Protected · pseudonymised

Sealed

Banking trail — Raiffeisen AG

3,842 records · legal hold

Hold

Forensic image SM-S911

128 GB · SHA-256 verified

Sealed
Chain of custody · last 6 events ✓ unbroken
1
2
3
4
5
6

Built for work that cannot be paused by a sanction.

Legacy e-discovery tools run on clouds your jurisdiction doesn't control. A political shift in Washington should not end a war-crimes investigation in The Hague.

Sovereign by default

Self-host on any infrastructure. Zero telemetry, zero outbound calls, air-gap compatible. No vendor lock-in.

Provably append-only

Every custody event is hash-chained. PostgreSQL RLS refuses UPDATEs and DELETEs — even from superusers.

Witness-safe

AES-256-GCM encryption of witness PII. Defence sees pseudonyms. Duress passphrases produce decoy vaults.

Open source, always

AGPL-3.0. Read the code, audit the crypto, fork if you have to. Evidence survives the company.

Seizure to sentence, every link signed.

Four phases, each cryptographically bound to the next.

Phase 1

Ingest

Chunked resumable uploads, client-side SHA-256, RFC 3161 timestamping. If a byte is off, the upload fails with a 409.

Phase 2

Seal

Append-only custody log. Each row hash-chains the previous. PostgreSQL RLS refuses UPDATEs — even from superusers.

Phase 3

Work

Real-time CRDT collaboration, redaction editor, witness linking, corroboration scoring — all on the sealed chain.

Phase 4

Export

One-click ZIP with evidence, custody log, and hash manifest. Court clerks verify with our open validator.

Trusted by institutions that cannot afford to lose a case.

International tribunals

ICC, ad-hoc tribunals, hybrid courts. Complex multi-jurisdictional cases with strict admissibility requirements.

Human rights investigators

Bellingcat, Mnemonic, Forensic Architecture, Airwars. Documenting violations, preserving digital evidence under hostile conditions.

Legal teams

Defence and prosecution handling sensitive material where chain of custody is legally critical. First-class defence counsel support.

Truth commissions

Transitional justice bodies managing testimony archives, victim statements, and historical documentation across decades.

Two ways to run an international case file.

VaultKeeper · Sovereign · Open

Self-hosted on any infrastructure — Hetzner, on-prem, air-gapped

DB-level append-only logs with hash chaining; no admin backdoor

Cryptographic federation for cross-tribunal evidence exchange

On-prem AI — Whisper, OCR, translation. Nothing leaves the box

AGPL-3.0. Read the source. Fork it. Verify the custody engine.

From €1,500/month, flat. Pricing that doesn't scale with panic.

Legacy · Proprietary · Cloud-locked

Azure-tied hosting. One sanctions action and you're locked out.

Admin-modifiable audit logs that defence counsel challenge.

File-export "federation" — no cryptographic guarantees.

Cloud AI. Witness statements through whoever owns the GPU.

Proprietary. You cannot audit the custody engine.

~€2.5M / 5yr at ICC scale, plus professional services.

A defence lawyer used to win cases by raising doubt about who held the drive overnight. With VaultKeeper that conversation is over before it begins.

Juge Hélène Morel

Presiding judge, Tribunal Judiciaire de Paris — Cybercrime chamber

Run a pilot this quarter.

A typical NGO is live in 15 minutes on their own Hetzner box. A full tribunal migration takes six weeks.

Book a demo → Self-host guide