Every organisation sealed off
Each workspace's rows carry its own key, checked on every request and covered by isolation tests. One organisation can never see another's.
Document management for organisations that answer for their records
Every document, from first draft to signed, provable record.
Capture, organise, approve and sign in one calm workspace — hosted in your region, usable offline, and keeping a tamper-evident record of every access.
30-day trial with every feature · No card needed · Or install it on your own server
A real workspace: the contract on the left, its record on the right.
Your server, or oursTamper-evident audit chainSSO, SCIM and two-factorWorks with no networkLegal hold built in
One flow
From the first upload to the last audit, in one place.
Bring every document in, however it arrives
Drag in files, forward email, watch a scanner folder, or collect answers with a public form. Every page is rendered, read and indexed before anyone asks for it.
- Text recognition on scans and photographs
- Email and watch-folder imports
- Checked for viruses before anyone opens it
Invoices and receipts
Money in, money out, read straight off the paper.
Most of an organisation's paper is about money. The invoice and receipt readers turn it into records you can total, check and hand to the auditor — without retyping a single figure.
Photograph the receipt. The books do the rest.
Fuel on the Masaka road, airtime, a client lunch: a photograph becomes a record with the merchant, date, total, how it was paid and what it was for — totalled by category, branch and person.
- Cash, mobile money and card, told apart
- Totals kept per currency, never converted behind your back
- One click to a spreadsheet your accountant can open
Branches and multi-tenancy
One organisation, many places. Many organisations, one platform.
Branches and departments draw the boundaries inside an organisation. Tenancy draws them between organisations — so a group, a franchise or a hosting partner can run them all without any of them seeing each other.
Every place you work from, side by side
Kampala, Jinja, Mbarara, Mombasa — each branch has a code, an address, a manager and a cabinet of its own. Anything filed there is counted as that branch's, so its invoices and receipts total themselves.
- A cabinet only the branch's people can open
- Branch managers see their branch's money; others do not
- Regions that group branches, when you need them
Its own name at the front door
Product name, logo, tagline and colour per workspace — so a white-label deployment looks like the customer's own.
Its own sign-in and directory
Single sign-on and SCIM per workspace: people arrive and leave when that organisation's directory says so.
Run many from one console
Plans, seats, storage, feature flags and release rings per tenant — with support that needs the owner's consent to look inside.
AI Flows
Expert assistants for the paperwork, not a blank chat box.
Each flow is built and tested for one job, runs through your workspace's privacy policy, and writes down every request in the audit trail.
Document brief
Key facts, obligations by date, risks and where to file it — on one page.
Contract review
Clause by clause: what is there, what is missing, and wording to replace the risky parts.
Translate & simplify
A faithful translation with notes, or a plain-language version anyone can read.
Meeting minutes
Rough notes in; formal minutes with decisions and an action register out.
Policy & SOP writer
Asks at most five questions, then drafts the full policy with document control.
Report writer
Donor, board and progress reports with results measured against targets.
Letters & e-mails
A draft with its subject line, and a shorter version beside it.
Records classifier
Type, title, tags, metadata, access level, personal data and retention — suggested for filing.
- Never invents a figure, date or name — gaps come back as [placeholders]
- Names are pseudonymised before a question leaves the building
- Each person's conversations are private to them
- Administrators choose which flows each role may use
On the phone
The registry, on the way to the meeting.
The iOS and Android app is the same workspace: the folders you are allowed to see, the documents in them, and the ability to add one with a camera — including where there is no network at all.
- 01The same workspace, in your handFolders, documents and search, with the permissions the server enforces — not a cut-down copy.
- 02File from the cameraPhotograph a delivery note or a signed page and it uploads as a new document, or a new version.
- 03Keep working with no signalPick the documents to keep on the phone. Anything captured offline queues and sends itself when the connection returns.
- 04Locked to the person holding itFace ID or a passcode on every return to the app, after a wait you choose.
Extensions
Switch on what your organisation needs. Leave the rest off.
Every extension is part of the same workspace — same permissions, same audit trail, same search — and each card says plainly whether it sends anything off the premises.
Intelligence
- Invoice readerSupplier, number, dates, tax and total from a photograph.
- ReceiptsSpending by category, branch and person, per currency.
- AI FlowsBriefs, contract reviews, minutes, policies, reports and letters.
- Knowledge assistantsAnswers from your own documents — in the app, on your website, or in the browser.
- ProposerA proposal written from a brief, in a template that already knows the shape.
- AI MemoryAsk questions of everything filed here, with answers that cite their sources.
Operations
- Supplier registerWho you buy from, whether their papers are current, what they are owed.
- RegistersSubcontractors, clinicians, tenants, fleet — and the certificates that qualify them.
- Approval workflowRoutes by type and value, with a certificate at the end.
- e-FormsCollect answers by link and turn each into a finished document.
Organisation and reach
- Departments and branchesBoundaries with cabinets of their own, for functions and places.
- Email StudioBranded e-mails to staff, partners and clients, with documents shared safely.
- Public PagesA public site for your organisation, built from your own work. Free.
- AutomationsWorkflows built by connecting steps, reaching hundreds of apps — or drive n8n.
Everything included
The tools records teams actually use.
Approvals with a certificate
Route by document type and value, delegate while away, escalate when late — and attach the record of who approved what.
Signatures and sealed copies
Sign inside the workspace, and send marked copies that name the person who opened them.
e-Forms and generated documents
Collect answers once through a link, then turn them into letters, certificates and reports.
Legal hold
Freeze a matter's documents against deletion, retention and edits — by anyone, including an administrator.
Departments
HR stays HR's. Each department brings its own members, cabinet, retention and workflows.
Reminders
Renewals, expiries and reviews, from a date on the document itself — not a spreadsheet.
Assistants that cite their sources
Ask questions of the documents you choose, in the app or on your website. It answers from them, or says it does not know.
Reports
Storage, uploads, approvals and activity — by department, by person, by day.
Coming next
On the roadmap — not in the product yet.
Built in the open, one at a time, each finished only when it is tested and running.
Security
We run DocBox DMS. We cannot read what you keep in it.
Support sees queue lengths and error messages — never a file, a name or a field. Self-hosted and sovereign installs make no outbound connection at all.
Your building, or your region
Install it on a server in your own office — the same release we run — or let us host it where you choose. Nothing about the software changes.
Your identity provider
Sign in through Google, Microsoft or Okta; people leave the moment your directory says so.
Your proof
An audit trail you can verify yourself, anchored where nobody — including us — can rewrite it.
Pricing
Pay for the people who use it.
An active seat is someone who signed in this month. Previews and OCR never count against your storage.
Team
Records somewhere trustworthy.
- Versions and audit trail
- OCR and search
- Share links with expiry
Business
Real process around documents.
- Everything in Team
- e-Forms, generation, e-signature
- Workflows, retention, departments and branches
- Locks, watermarks, offline replica
Enterprise
Compliance and integration.
- Everything in Business
- SSO, SCIM, API
- Invoice and receipt reading, AI Flows
- Legal hold
- Choice of region
Sovereign
Your servers. Even offline.
- Everything in Enterprise
- Air-gapped operation
- Signed offline licence
- No telemetry of any kind
Questions
Asked before every purchase.
What happens if we stop paying?
Nothing is deleted. After fourteen days of grace the workspace becomes read-only, and exporting everything stays open at full speed.
Can it run without the internet?
Yes. The desktop replica and file mirror keep working offline, and a sovereign install of DocBox DMS never connects out at all.
Can your staff read our documents?
No. The support console shows counts, sizes and errors. A support session needs your owner's consent, is time-limited, and appears in your own audit log.
Can we use our own sign-in?
Yes — single sign-on with Google Workspace, Microsoft Entra ID or Okta, and SCIM so people are added and removed from your directory.
Put your records somewhere you can defend.
Start a workspace in two minutes. Bring one folder, or the whole filing room.