Every account includes Pro during the beta. No payment details are collected.
Private notes for people who cannot risk a leak.
Encrypted on your device. Searchable offline. Syncs everywhere.
AES-GCM 256
Zero-knowledge authentication
On-Device OCR
Encrypted notes app
Zero-knowledge notes PWA for work you cannot leak
Looking for encrypted notes, a Standard Notes alternative, or a private receipt scanner that never sends document text to the cloud? Deeperguard is a zero-knowledge notes PWA: AES-GCM and SRP-6a on your device, ciphertext-only sync, and optional on-device OCR under receipts and invoices — not a separate “scan-first” product. Full Standard Notes comparison →
Open source
Open source on GitHub — inspect the encryption and client code yourself.
The full application source is published for independent review. Verify how notes are encrypted, how sync works, and what the server actually stores.
View source on GitHubThe server stores encrypted notes. It does not hold a copy it can read.
AES-GCM 256 runs on your device. Sync moves ciphertext, not the note.
Source on GitHub for independent code review.
Use cases
Where a leak is not an option
Zero-knowledge matters when the note itself is the secret. The server never receives a readable copy.
Credentials and 2FA
Keep recovery codes and authenticator secrets in the vault. Pro includes a vault authenticator so those codes stay inside the same encrypted store.
Receipts and invoices
Photograph a document and search the text later. OCR runs on your device. The scan is encrypted before it syncs.
Confidential work notes
Client names, drafts, and internal notes stay unreadable to the host. Search still works on this device, including offline.
A private journal
Personal notes are encrypted with the same vault. There is no staff view and no server-side copy of the text.
Public beta: full Pro free — 5 GB, passkeys, encrypted backups, on-device OCR. No payment details.
Create free vault Sign in
Comparison
How Deeperguard compares
Whether you are leaving Evernote, comparing Standard Notes, Notesnook, or Joplin, here is an honest distinction — no fear-mongering, just architecture and product fit.
Deeperguard
Browser notes with client-side encryption, on-device OCR, and offline use.
- True zero-knowledge: Server stores only encrypted ciphertext blobs.
- Client-side OCR: Search scanned receipts and PDFs without cloud AI parsing.
- No app store lock-in: Installable PWA with full offline vault support.
- Built-in 2FA & Passkeys: Modern WebAuthn hardware key support.
- Standard Notes Import: Easy migration with 1-click vault JSON import.
- Public beta: Pro features included at no charge, including 5 GB storage.
Difference: Ciphertext-only sync, OCR on the device, and a browser app you can use offline. Pro after beta adds passkeys, backups, and the vault authenticator.
Standard Notes
Established encrypted notes ecosystem with extensive desktop apps and plugin extensions.
- Zero-knowledge: Mature end-to-end encrypted architecture.
- Extensible: Plentiful editors, themes, and extensions on paid tiers.
- Paid advanced features: Published plans are about €4–€10 per month.
- No on-device OCR: Searching text inside a scanned page is not part of the product.
- Apps: Desktop and mobile clients are the usual way to use it. A web app also exists.
Difference: Also zero-knowledge. It does not offer on-device OCR for scanned pages.
Full Standard Notes comparison →
Evernote
Mainstream productivity notebook with cloud-based features and third-party integrations.
- Rich features: Web clipper, audio recording, and extensive templates.
- Not zero-knowledge: The service can access note plaintext on its servers.
- Cloud OCR: Text from scans is processed on Evernote’s servers.
- Paid plans: Published tiers are about €8–€15 per month. The free tier is limited.
Difference: A full-featured notebook. It is not zero-knowledge: the server can access plaintext.
Notesnook
Open-source encrypted notes with native apps and a focus on privacy-first writing.
- Zero-knowledge: End-to-end encrypted notes and attachments on Notesnook sync.
- Open source: Client code is published for review (server components vary by deployment).
- Native apps: Desktop and mobile clients are a primary experience.
- Paid Pro tier: Advanced features and higher limits on published plans.
- No browser on-device OCR: Not positioned as a private receipt/PDF OCR workflow in the browser.
Difference: Also privacy-first encrypted notes. Deeperguard adds a browser PWA with on-device OCR and Standard Notes import; Notesnook fits teams already on its apps.
Joplin
Popular open-source notebook with Markdown, plugins, and bring-your-own sync (Dropbox, WebDAV, Joplin Cloud, etc.).
- Open source & self-host friendly: Large community, many sync targets, rich Markdown tooling.
- Optional E2EE: End-to-end encryption is available when enabled; sync provider may still see metadata depending on setup.
- Not ciphertext-only by default: Without E2EE, sync targets can hold readable note bodies.
- App-centric: Desktop and mobile apps are the usual workflow; web clipper is separate.
- OCR: Not a built-in private receipt scanner comparable to client-side WASM OCR in the browser.
Difference: Flexible open notebook + sync choice. Deeperguard is a single hosted zero-knowledge vault with strict ciphertext-only sync and a notes PWA — closer to Standard Notes/Notesnook than to Joplin’s sync-anywhere model.
| Feature / Capability | Deeperguard | Standard Notes | Notesnook | Joplin | Evernote |
|---|---|---|---|---|---|
| Zero-Knowledge Privacy Provider cannot read titles, notes, or attachments | ✓ Yes (Strict) | ✓ Yes | ✓ Yes (Notesnook sync) | Optional E2EE | ✕ No (Cloud Access) |
| Client-Side Cryptography Encrypted on device before any sync occurs | ✓ AES-GCM 256 | ✓ Yes | ✓ Yes | When E2EE enabled | ✕ Server-side only |
| Zero-Knowledge Authentication Master vault password never sent across the internet | ✓ SRP-6a Proof | ✓ Key derivation | ✓ Password-based ZK login | Master password for E2EE | ✕ Password sent to server |
| Document Scan & Search (OCR) Search text inside images and PDFs | ✓ On-Device (Client) Pro | Raw files only | Attachments; no WASM OCR focus | Plugins / external tools | Cloud OCR (Server reads) |
| App install Browser · Add to Home Screen (no app store) | ✓ No store install (PWA) | Web or Desktop apps | Native apps primary | Desktop / mobile apps | Native apps expected |
| Passkeys (WebAuthn) & 2FA Biometrics, Touch ID, Face ID, TOTP | ✓ Passkeys + TOTP Pro | ✓ 2FA (Paid plans) | 2FA on paid tiers | Varies by sync / plugins | Limited 2FA |
| Automated Encrypted Backups Daily encrypted backups to email or cloud | ✓ Email + pCloud Pro | Cloud Sync (Paid) | Export / sync (plan-dependent) | Export + your sync target | ✕ Proprietary backup |
| Migration Support Import existing notes from other platforms | ✓ Standard Notes import | — | Importers / export from others | Many import formats | — |
| Vault Authenticator Store 2FA TOTP secret keys inside encrypted notes | ✓ Built-in TOTP Pro | — | — | — | — |
| Open source client Review encryption implementation yourself | ✓ GitHub | ✓ Yes | ✓ Yes | ✓ Yes | ✕ Closed source |
| Current Beta Pricing Active cost during public rollout | Free during public beta | ~€4 – €10 / month | Free tier + paid Pro | Free (self-sync) / Joplin Cloud paid | ~€8 – €15 / month |
| Free Tier Storage Capacity provided without payment | 5 GB (Pro Beta) | Limited text notes | Plan-dependent | Unlimited local; sync limits vary | 50 notes max (restricted) |
Privacy by architecture
Privacy by architecture, not by policy
A database copy is still ciphertext. Reading a note requires the vault password on a device you unlock. The details of how that key is made are in How encryption works.
Local Key Derivation
Your password is processed with Argon2id and PBKDF2 directly on your device. The server receives an SRP verification proof and only stores unreadable encrypted chunks.
Fast Offline PWA
Open the app in Safari, Chrome, or Firefox. Add it to your home screen for an app-like experience with offline access, offline caching, and instant launch.
Encrypted Sync Engine
Write notes on your iPhone, continue on your laptop. Multi-device sync happens smoothly in the background while keeping everything end-to-end encrypted.
Private Client OCR
Photograph receipts, invoices, and documents. Client-side WebAssembly OCR parses text in your browser so you can search inside PDFs without leaking plaintext.
Passkeys & TOTP 2FA
Use Face ID, Touch ID, or hardware security keys to sign into your account safely. Protect sensitive individual notes with edit locks while screen sharing.
Resilient Backups
Sleep soundly with daily encrypted email snapshots or automated backups pushed directly to your personal pCloud drive—always encrypted with your keys.
How encryption works
How Deeperguard works
Create an account, unlock the vault on this device, then write and sync. The cryptography stays on the device.
Create your free account
Sign up with your email and a strong master password. All accounts automatically receive Pro status for free during our public beta.
Unlock your local vault
This device derives the vault key locally with Argon2id and PBKDF2. Sign-in uses SRP-6a, so the server stores a verifier, not the password. Sync stores AES-GCM 256 ciphertext.
Write, scan & sync
Compose notes, organize with tags, attach files, scan documents, and search instantly. Everything remains encrypted before transmission.
Public Beta Schedule
Transparent pricing schedule
During the public beta every account includes Pro, and no payment details are collected. After the beta, Basic is €2.99/month or €29/year. Pro is €6.99/month or €69/year, and that is the plan that keeps backups, passkeys, OCR, 5 GB, and the vault authenticator. Billing starts only after advance notice.
Free during the public beta
No payment details are collected during the beta, and billing does not start without advance notice. After the beta, Pro is the plan that keeps 5 GB, passkeys, two-factor sign-in, encrypted backups, on-device OCR, and the vault authenticator.
Basic
Private encrypted notes on every device
€0/month
Free in beta · Standard schedule: €2.99/mo or €29/yr
100 MB encrypted storage
- Encrypted note sync
- Attachments & scans
- Import & export
Pro
Backups, security extras, and room to grow
€0/month
Free in beta · Standard schedule: €6.99/mo or €69/yr
5 GB encrypted storage
- Encrypted note sync
- Attachments & scans
- Import & export
- Passkey sign-in
- Account two-factor authentication
- Daily email backup
- pCloud backup
- Note reminders
- Document OCR & search
- Vault authenticator
| Feature | Basic | Pro (Free in Beta) |
|---|---|---|
| Encrypted Cloud Storage | 100 MB | 5 GB |
| Encrypted note sync | ✓ Included | ✓ Included |
| Attachments & scans | ✓ Included | ✓ Included |
| Import & export | ✓ Included | ✓ Included |
| Passkey sign-in | — | ✓ Included |
| Account two-factor authentication | — | ✓ Included |
| Daily email backup | — | ✓ Included |
| pCloud backup | — | ✓ Included |
| Note reminders | — | ✓ Included |
| Document OCR & search | — | ✓ Included |
| Vault authenticator | — | ✓ Included |
FAQ
Frequently asked questions
Can Deeperguard or its host read my notes?
No. Notes, titles, and attachments are encrypted in your browser using AES-GCM before syncing. We only store encrypted binary ciphertext. Your vault password is never transmitted in readable form.
Can I review the source code?
Yes. Deeperguard is open source. The full application source is on GitHub so you can inspect the encryption, sync, and client logic yourself.
Do I have to download or install an application from an app store?
No. Deeperguard runs as a fast Progressive Web App (PWA) in any modern browser. On iOS Safari or Android Chrome, simply select "Add to Home Screen" for a full-screen, offline-capable experience.
How does document search work if notes are zero-knowledge?
Document OCR runs directly on your device using WebAssembly (Tesseract.js). The extracted text is encrypted client-side and attached to your note's ciphertext before syncing, allowing full-text search without compromising privacy.
What is the pricing schedule during and after the beta?
During the public beta, all accounts receive full Pro features (5 GB storage, passkeys, OCR, backups) completely free of charge. No payment info is collected. When billing launches in the future, Pro will be €6.99/mo (or €69/year) and Basic will be €2.99/mo (or €29/year).
What happens if I lose my password?
Because Deeperguard is zero-knowledge, we cannot reset or recover your master vault password. Without it, ciphertext on our servers cannot be decrypted — there is no “forgot password” email that restores access.
Set up protection early: During the public beta every account includes Pro. Turn on daily encrypted email backups and/or pCloud encrypted backups in Settings as soon as your vault is ready. Archives stay encrypted; you still need the vault password to open them, but you will not lose the only copy if a device fails.
If sign-in credentials drift but you still know your vault password, the app can guide you through vault login recovery using encrypted samples on the server — that is not a master-password reset.
Can I import my existing notes from Standard Notes?
Yes. Deeperguard provides built-in Standard Notes backup import. You can upload your decrypted or encrypted Standard Notes export file directly in Settings.
Where do I open my notes app?
Visit https://www.deeperguard.com/app to access your notes vault. You can sign in using your account credentials or passkey, then unlock your vault.
Get in Touch
Contact us
Questions about the product or the beta: [email protected]. Security reports use the same address with the subject “Vulnerability report”.
Create a vault for notes you cannot leak
Free Pro access during the public beta. No payment details until you are told billing will start.
Create free vault Open notes app
About
Who builds Deeperguard
Deeperguard is an independent notes product in public beta. Security reports and product questions go to [email protected].