EpochVault · Multi-recipient envelope

One file.
N recipients.
Zero trust.

Send sensitive documents to many recipients without trusting any of them — or us. Encrypt-once-address-many for legal hold, M&A data rooms, board comms, e-discovery. Post-quantum from day one.

Encrypt once

Plaintext encrypted a single time. Each recipient unwraps their own copy of the key. No re-encryption per recipient.

Independent unwrap

Each recipient holds their own key. Revoking one recipient never touches the others.

Audit-trail by default

Every unwrap is logged in the per-tenant ledger. Independently verifiable inclusion proofs.

Workflow

# 1. Each recipient generates a key (or you mint one for them)
curl -X POST https://app.epochcoreqcs.com/v1/vault/keys \
  -d '{"algorithm":"","key_purpose":"deal-room-alpha"}'
# algorithm options: see openapi.json — post-quantum KEM recommended for envelopes

# 2. Seal the doc once, address it to N recipients
curl -X POST https://app.epochcoreqcs.com/v1/vault/envelopes \
  -d '{"payload":"deal-room-content...","recipient_key_ids":["key_a","key_b","key_c"]}'

# 3. Recipient unwraps their copy
curl -X POST https://app.epochcoreqcs.com/v1/vault/envelopes/env_.../unwrap \
  -d '{"recipient_key_id":"key_a"}'

Pricing

Enterprise

Contact
BYOC · KP-backed · SLA
  • Customer-held master keys
  • Hardware HSM custody
  • White-label envelopes