Every account includes Pro during the beta. No payment details are collected.
Private notes for people who cannot risk a leak.
Encrypted on your device. Searchable offline. Syncs everywhere.
AES-GCM 256
Zero-knowledge authentication
On-Device OCR
Open source
Open source on GitHub — inspect the encryption and client code yourself.
The full application source is published for independent review. Verify how notes are encrypted, how sync works, and what the server actually stores.
View source on GitHub
Encrypted notes app
Zero-knowledge notes PWA for work you cannot leak
Deeperguard is a zero-knowledge notes PWA for encrypted notes: ciphertext-only sync and on-device OCR.
The server stores encrypted notes. It does not hold a copy it can read.
AES-GCM 256 runs on your device. Sync moves ciphertext, not the note.
Source on GitHub for independent code review.
Use cases
Where a leak is not an option
Zero-knowledge matters when the note itself is the secret. The server never receives a readable copy.
Credentials and 2FA
Keep recovery codes and authenticator secrets in the vault. Pro includes a vault authenticator so those codes stay inside the same encrypted store.
Receipts and invoices
Photograph a document and search the text later. OCR runs on your device. The scan is encrypted before it syncs.
Confidential work notes
Client names, drafts, and internal notes stay unreadable to the host. Search still works on this device, including offline.
A private journal
Personal notes are encrypted with the same vault. There is no staff view and no server-side copy of the text.
Comparison
How Deeperguard compares
Whether you are leaving Evernote, comparing Standard Notes, Notesnook, or Joplin, here is an honest distinction — no fear-mongering, just architecture and product fit.
Deeperguard
Browser notes with client-side encryption, on-device OCR, and offline use.
- True zero-knowledge: Server stores only encrypted ciphertext blobs.
- Client-side OCR: Search scanned receipts and PDFs without cloud AI parsing.
- No app store lock-in: Installable PWA with full offline vault support.
- Built-in 2FA & Passkeys: Modern WebAuthn hardware key support.
- Standard Notes Import: Easy migration with 1-click vault JSON import.
- Public beta: Pro features included at no charge, including 5 GB storage.
Difference: Ciphertext-only sync, OCR on the device, and a browser app you can use offline. Pro after beta adds passkeys, backups, and the vault authenticator.
Standard Notes
Established encrypted notes ecosystem with extensive desktop apps and plugin extensions.
- Zero-knowledge: Mature end-to-end encrypted architecture.
- Extensible: Plentiful editors, themes, and extensions on paid tiers.
- Paid advanced features: Published plans are about €4–€10/mo (~$90–$120/yr for top tiers).
- No on-device OCR: Searching text inside a scanned page is not part of the product.
- Apps: Desktop and mobile clients are the usual way to use it. A web app also exists.
Difference: Also zero-knowledge. It does not offer on-device OCR for scanned pages.
Full Standard Notes comparison →
Evernote
Mainstream productivity notebook with cloud-based features and third-party integrations.
- Rich features: Web clipper, audio recording, and extensive templates.
- Not zero-knowledge: The service can access note plaintext on its servers.
- Cloud OCR: Text from scans is processed on Evernote’s servers.
- Paid plans: Published tiers are about €8–€15 per month. The free tier is limited.
Difference: A full-featured notebook. It is not zero-knowledge: the server can access plaintext.
Notesnook
Open-source encrypted notes with native apps and a focus on privacy-first writing.
- Zero-knowledge: End-to-end encrypted notes and attachments on Notesnook sync.
- Open source: Client code is published for review (server components vary by deployment).
- Native apps: Desktop and mobile clients are a primary experience.
- Paid Pro tier: Advanced features and higher limits on published plans.
- No browser on-device OCR: Not positioned as a private receipt/PDF OCR workflow in the browser.
Difference: Also privacy-first encrypted notes. Deeperguard adds a browser PWA with on-device OCR and Standard Notes import; Notesnook fits teams already on its apps.
Joplin
Popular open-source notebook with Markdown, plugins, and bring-your-own sync (Dropbox, WebDAV, Joplin Cloud, etc.).
- Open source & self-host friendly: Large community, many sync targets, rich Markdown tooling.
- Optional E2EE: End-to-end encryption is available when enabled; sync provider may still see metadata depending on setup.
- Not ciphertext-only by default: Without E2EE, sync targets can hold readable note bodies.
- App-centric: Desktop and mobile apps are the usual workflow; web clipper is separate.
- OCR: Not a built-in private receipt scanner comparable to client-side WASM OCR in the browser.
Difference: Flexible open notebook + sync choice. Deeperguard is a single hosted zero-knowledge vault with strict ciphertext-only sync and a notes PWA — closer to Standard Notes/Notesnook than to Joplin’s sync-anywhere model.
Privacy by architecture
Privacy by architecture, not by policy
A database copy is still ciphertext. Reading a note requires the vault password on a device you unlock. The details of how that key is made are in How encryption works.
Local Key Derivation
Your password is processed with Argon2id and PBKDF2 directly on your device. The server receives an SRP verification proof and only stores unreadable encrypted chunks.
Fast Offline PWA
Open the app in Safari, Chrome, or Firefox. Add it to your home screen for an app-like experience with offline access, offline caching, and instant launch.
Encrypted Sync Engine
Write notes on your iPhone, continue on your laptop. Multi-device sync happens smoothly in the background while keeping everything end-to-end encrypted.
Private Client OCR
Photograph receipts, invoices, and documents. Client-side WebAssembly OCR parses text in your browser so you can search inside PDFs without leaking plaintext.
Passkeys & TOTP 2FA
Use Face ID, Touch ID, or hardware security keys to sign into your account safely. Protect sensitive individual notes with edit locks while screen sharing.
Resilient Backups
Sleep soundly with daily encrypted email snapshots or automated backups pushed directly to your personal pCloud drive—always encrypted with your keys.
How encryption works
How Deeperguard works
Create an account, unlock the vault on this device, then write and sync. The cryptography stays on the device.
Create your free account
Sign up with your email and a strong master password. All accounts automatically receive Pro status for free during our public beta.
Unlock your local vault
This device derives the vault key locally with Argon2id and PBKDF2. Sign-in uses SRP-6a, so the server stores a verifier, not the password. Sync stores AES-GCM 256 ciphertext.
Write, scan & sync
Compose notes, organize with tags, attach files, scan documents, and search instantly. Everything remains encrypted before transmission.
Public Beta Schedule
Transparent pricing schedule
Free during beta: Pro, 5 GB. No payment details are collected. After the beta, Basic is €2.99/month or €29/year (100 MB). Pro is €6.99/month or €69/year (5 GB) and keeps backups, passkeys, OCR, and the vault authenticator. Billing starts only after advance notice.
Free during beta: Pro, 5 GB
The cards below are the post-beta prices. During the public beta every new account is Pro with 5 GB, not the Basic 100 MB plan.
Basic
Private encrypted notes on every device
After beta
€2.99/mo or €29/yr
100 MB after beta. During beta you get Pro, 5 GB.
- Encrypted note sync
- Attachments & scans
- Import & export
- Not included: Passkey sign-in
- Not included: Account two-factor authentication
- Not included: Daily email backup
- Not included: pCloud backup
- Not included: Note reminders
- Not included: Document OCR & search
- Not included: Vault authenticator
Not what you get in the beta. Beta accounts are Pro.
Pro
Backups, security extras, and room to grow
Free during beta
After beta: €6.99/mo or €69/yr
5 GB encrypted storage during beta and on Pro after beta.
- Encrypted note sync
- Attachments & scans
- Import & export
- Passkey sign-in
- Account two-factor authentication
- Daily email backup
- pCloud backup
- Note reminders
- Document OCR & search
- Vault authenticator
| Feature | Basic | Pro (Free in Beta) |
|---|---|---|
| Encrypted Cloud Storage | 100 MB | 5 GB |
| Encrypted note sync | ✓ Included | ✓ Included |
| Attachments & scans | ✓ Included | ✓ Included |
| Import & export | ✓ Included | ✓ Included |
| Passkey sign-in | — | ✓ Included |
| Account two-factor authentication | — | ✓ Included |
| Daily email backup | — | ✓ Included |
| pCloud backup | — | ✓ Included |
| Note reminders | — | ✓ Included |
| Document OCR & search | — | ✓ Included |
| Vault authenticator | — | ✓ Included |
FAQ
Frequently asked questions
Can Deeperguard or its host read my notes?
No. Notes, titles, and attachments are encrypted in your browser using AES-GCM before syncing. We only store encrypted binary ciphertext. Your vault password is never transmitted in readable form.
Can I review the source code?
Yes. Deeperguard is open source. The full application source is on GitHub so you can inspect the encryption, sync, and client logic yourself.
Do I have to download or install an application from an app store?
No. Deeperguard runs as a fast Progressive Web App (PWA) in any modern browser. On iOS Safari or Android Chrome, simply select "Add to Home Screen" for a full-screen, offline-capable experience.
How does document search work if notes are zero-knowledge?
Document OCR runs directly on your device using WebAssembly (Tesseract.js). The extracted text is encrypted client-side and attached to your note's ciphertext before syncing, allowing full-text search without compromising privacy.
What is the pricing schedule during and after the beta?
During the public beta, all accounts receive full Pro features (5 GB storage, passkeys, OCR, backups) completely free of charge. No payment info is collected. When billing launches in the future, Pro will be €6.99/mo (or €69/year) and Basic will be €2.99/mo (or €29/year).
What happens if I lose my password?
Because Deeperguard is zero-knowledge, we cannot reset or recover your master vault password. Without it, ciphertext on our servers cannot be decrypted — there is no “forgot password” email that restores access.
Set up protection early: During the public beta every account includes Pro. Turn on daily encrypted email backups and/or pCloud encrypted backups in Settings as soon as your vault is ready. Archives stay encrypted; you still need the vault password to open them, but you will not lose the only copy if a device fails.
If sign-in credentials drift but you still know your vault password, the app can guide you through vault login recovery using encrypted samples on the server — that is not a master-password reset.
Can I import my existing notes from Standard Notes?
Yes. Deeperguard provides built-in Standard Notes backup import. You can upload your decrypted or encrypted Standard Notes export file directly in Settings.
Where do I open my notes app?
Visit https://www.deeperguard.com/app to access your notes vault. You can sign in using your account credentials or passkey, then unlock your vault.
Get in Touch
Contact us
Questions about the product or the beta: [email protected]. Security reports use the same address with the subject “Vulnerability report”.
Create a vault for notes you cannot leak
Free Pro access during the public beta. No payment details until you are told billing will start.
Create free vault Open notes app
About
Who builds Deeperguard
Deeperguard is an independent notes product in public beta. Security reports and product questions go to [email protected].