Free, Basic, and Pro tiers with storage, device, and feature limits. New accounts start on Free (50 MB).
Private notes and documents you can search. Encrypted before they leave your device.
Scan receipts, invoices and contracts. Text recognition runs in your browser, and sync only ever sees ciphertext. The one exception is Ask AI, which sends the text you choose through our server to Ollama Cloud. Don't take our word for it: check it yourself.
AES-GCM 256
Zero-knowledge authentication
On-Device OCR
Source available
Source available for review — inspect the encryption and client code yourself.
The application source is published on GitHub for independent review. Verify how notes are encrypted, how sync works, and what the server actually stores. Production or commercial use requires permission — see LICENSE.
View source on GitHub
Encrypted notes app
Zero-knowledge notes PWA for work you cannot leak
Deeperguard is a zero-knowledge notes PWA for encrypted notes: ciphertext-only sync (except Ask AI) and on-device OCR.
The server stores encrypted notes. It does not hold a readable copy, except note text you send to Ask AI.
AES-GCM 256 runs on your device. Sync moves ciphertext (except Ask AI), not the note.
Client source on GitHub for inspection and audit — see LICENSE.
Use cases
Where a leak is not an option
Zero-knowledge matters when the note itself is the secret. The server never receives a readable copy unless you send text to Ask AI with Ollama Cloud.
Credentials and 2FA
Keep recovery codes and authenticator secrets in the vault. Pro includes a vault authenticator so those codes stay inside the same encrypted store.
Receipts and invoices
Photograph a document and search the text later. OCR runs on your device. The scan is encrypted before it syncs.
Confidential work notes
Client names, drafts, and internal notes stay unreadable to the host unless sent to Ask AI. Search still works on this device, including offline.
A private journal
Personal notes are encrypted with the same vault. There is no staff view and no server-side copy of the text, unless you send text to Ask AI with Ollama Cloud.
Comparison
How Deeperguard compares
Whether you are leaving Evernote, comparing Standard Notes, Notesnook, or Joplin, here is an honest distinction — no fear-mongering, just architecture and product fit.
Deeperguard
Browser notes with client-side encryption, on-device OCR, and offline use.
- True zero-knowledge: Server stores only ciphertext, except note text you send to Ask AI, which passes through our server to Ollama Cloud and is not stored.
- Client-side OCR: Search scanned receipts and PDFs without cloud AI parsing.
- No app store lock-in: Installable PWA with full offline vault support.
- 2FA codes in your vault: Keep 2FA codes in your encrypted vault. On Pro, sign in with a passkey or a code from your authenticator app.
- Standard Notes Import: Easy migration with 1-click vault JSON import.
- Free tier: Encrypted sync, attachments, import/export, and on-device OCR on 50 MB (3 signed-in devices).
Difference: Ciphertext-only sync (except Ask AI), OCR on the device, and a browser app you can use offline. Basic is encrypted sync, attachments, import, and on-device OCR on 100 MB; Pro adds passkeys, account 2FA, daily email and pCloud backups, reminders, and the vault authenticator on 5 GB.
Standard Notes
Established encrypted notes ecosystem with extensive desktop apps and plugin extensions.
- Zero-knowledge: Mature end-to-end encrypted architecture.
- Free plan includes 2FA and daily encrypted email backups.
- Part of Proton since April 2024.
- Extensible: Plentiful editors, themes, and extensions on paid tiers.
- Paid plans: About $90/year (Productivity) or $120/year (Professional) — see Standard Notes plans.
- Apps: Desktop and mobile clients are the usual way to use it. A web app also exists.
Difference: Also zero-knowledge. Deeperguard adds text recognition for scans and PDFs in your browser.
Full Standard Notes comparison →
Evernote
Mainstream productivity notebook with cloud-based features and third-party integrations.
- Rich features: Web clipper, audio recording, and extensive templates.
- Not zero-knowledge: The service can access note plaintext on its servers — see Evernote plans.
- Paid plans: Paid plans; the free plan is limited (Evernote plans).
Difference: A full-featured notebook. It is not zero-knowledge: the server can access plaintext.
Evernote alternative guide →
Notesnook
Open-source encrypted notes with a web app plus native desktop and mobile apps, and a generous free plan.
- Zero-knowledge: End-to-end encrypted notes and attachments on Notesnook sync.
- Open source: Client code is published for review (server components vary by deployment).
- Web and native apps: A browser app plus desktop and mobile clients.
- Paid Pro tier: Advanced features and higher limits on published plans.
Difference: Also privacy-first, with client source available for review on GitHub. Deeperguard adds in-browser OCR for scans and PDFs, plus 2FA codes kept in the same vault.
Full Notesnook comparison →
Joplin
Popular open-source notebook with Markdown, plugins, and bring-your-own sync (Dropbox, WebDAV, Joplin Cloud, etc.).
- Open source & self-host friendly: Large community, many sync targets, rich Markdown tooling.
- Optional E2EE: End-to-end encryption is available when enabled; sync provider may still see metadata depending on setup.
- Not ciphertext-only by default: Without E2EE, sync targets can hold readable note bodies.
- App-centric: Desktop and mobile apps are the usual workflow; web clipper is separate.
- OCR: Built in and offline, but only in the desktop app. Encryption is off until you turn it on (Joplin OCR).
Difference: Deeperguard is encrypted from the first note and runs OCR in any browser, including on your phone, with nothing to install.
Full Joplin comparison →
Privacy by architecture
Privacy by architecture, not by policy
A database copy is still ciphertext. Reading a note requires the vault password on a device you unlock. The details of how that key is made are in How encryption works.
Local Key Derivation
Your password is processed with Argon2id directly on your device. The server receives an SRP verification proof and only stores unreadable encrypted chunks, except text you choose to send to Ask AI with Ollama Cloud, which passes through our server to ollama.com without being stored.
Fast Offline PWA
Open the app in Safari, Chrome, or Firefox. Add it to your home screen for an app-like experience with offline access, offline caching, and instant launch.
Encrypted Sync Engine
Write notes on your iPhone, continue on your laptop. Multi-device sync happens smoothly in the background while keeping everything end-to-end encrypted.
Private Client OCR
Photograph receipts, invoices, and documents. Client-side WebAssembly OCR parses text in your browser so you can search inside PDFs without leaking plaintext.
Passkeys & TOTP 2FA
Use Face ID, Touch ID, or hardware security keys to sign into your account safely. Protect sensitive individual notes with edit locks while screen sharing.
Resilient Backups
Sleep soundly with daily encrypted email snapshots or automated backups pushed directly to your personal pCloud drive—always encrypted with your keys.
How encryption works
How Deeperguard works
Create an account, unlock the vault on this device, then write and sync. The cryptography stays on the device. You can verify zero-knowledge yourself in DevTools — SRP proofs on login, ciphertext-only sync (except Ask AI) — or open View server copy on any item in the app.
Create your free account
Sign up with your email and a strong master password. You start on the Free plan — upgrade to Basic or Pro when billing launches for higher limits and Pro-only features.
Unlock your local vault
This device derives the vault key locally with Argon2id. Sign-in uses SRP-6a, so the server stores a verifier, not the password. Sync stores AES-GCM 256 ciphertext.
Write, scan & sync
Compose notes, organize with tags, attach files, scan documents, and search instantly. Everything remains encrypted before transmission.
Pricing
Free, Basic, and Pro
Start on Free (50 MB). Upgrade anytime — Basic €2.99/mo or €29/yr, Pro €6.99/mo or €69/yr. Billing is not active yet — Free, Basic, and Pro limits apply today.
Server in Vienna, Austria (EU)
Operated by Schutten Invest
Source available for review
Check the encryption yourself
Signed releases
Security notes
Free
Encrypted notes to get started
Free
Always free
50 MB encrypted storage. Up to 3 signed-in devices. On-device OCR, sync, attachments, and import/export.
- Encrypted note sync
- Attachments & scans
- Import & export
- Document OCR & search
- Not included: Passkey sign-in
- Not included: Account two-factor authentication
- Not included: Daily email backup
- Not included: pCloud backup
- Not included: Note reminders
- Not included: Vault authenticator
Basic
Private encrypted notes on every device
€2.99/mo
or €29/yr
100 MB encrypted storage. Up to 10 signed-in devices.
- Encrypted note sync
- Attachments & scans
- Import & export
- Document OCR & search
- Not included: Passkey sign-in
- Not included: Account two-factor authentication
- Not included: Daily email backup
- Not included: pCloud backup
- Not included: Note reminders
- Not included: Vault authenticator
Pro
Backups, security extras, and room to grow
€6.99/mo
or €69/yr when billing launches
5 GB encrypted storage, unlimited signed-in devices, plus backups, passkeys, and the vault authenticator.
- Encrypted note sync
- Attachments & scans
- Import & export
- Document OCR & search
- Passkey sign-in
- Account two-factor authentication
- Daily email backup
- pCloud backup
- Note reminders
- Vault authenticator
| Feature | Free | Basic | Pro |
|---|---|---|---|
| Encrypted Cloud Storage | 50 MB | 100 MB | 5 GB |
| Signed-in devices | 3 | 10 | Unlimited |
| Secure Send (encrypted share-by-link) | 3 / day | 10 / day | Unlimited |
| Encrypted note sync | ✓ Included | ✓ Included | ✓ Included |
| Attachments & scans | ✓ Included | ✓ Included | ✓ Included |
| Import & export | ✓ Included | ✓ Included | ✓ Included |
| Document OCR & search | ✓ Included | ✓ Included | ✓ Included |
| Passkey sign-in | — | — | ✓ Included |
| Account two-factor authentication | — | — | ✓ Included |
| Daily email backup | — | — | ✓ Included |
| pCloud backup | — | — | ✓ Included |
| Note reminders | — | — | ✓ Included |
| Vault authenticator | — | — | ✓ Included |
FAQ
Frequently asked questions
Can Deeperguard or its host read my notes?
Stored notes: no. Notes, titles, and attachments are encrypted in your browser using AES-GCM before syncing. We only store encrypted binary ciphertext, except text you choose to send to Ask AI with Ollama Cloud, which passes through our server to ollama.com without being stored. Your vault password is never transmitted in readable form.
Can I review the source code?
Yes. The client source is available for review on GitHub so you can inspect encryption, sync, and client logic. The license allows inspection and audit; it does not allow using the software in production or commercially without a separate agreement. See LICENSE on GitHub. You can also verify behavior in the browser on /verify.
Do I have to download or install an application from an app store?
No. Deeperguard runs as a fast Progressive Web App (PWA) in any modern browser. On iOS Safari or Android Chrome, simply select "Add to Home Screen" for a full-screen, offline-capable experience.
How does document search work if notes are zero-knowledge?
Document OCR runs directly on your device using WebAssembly (Tesseract.js). The extracted text is encrypted client-side and attached to your note's ciphertext before syncing, allowing full-text search without compromising privacy.
What are the plans and pricing?
New accounts start on Free (50 MB, always €0, 3 signed-in devices) with sync, attachments, import/export, and on-device OCR — not passkeys, account 2FA, email or pCloud backups, reminders, or the vault authenticator. Basic is €2.99/mo or €29/yr (100 MB, 10 devices) with the same feature set as Free. Pro is €6.99/mo or €69/yr (5 GB, unlimited devices) and adds passkeys, account 2FA, daily email backup, pCloud backup, reminders, and the vault authenticator. Billing is not active yet — Free, Basic, and Pro limits apply today. Existing accounts keep their stored plan. Billing starts only after advance notice.
How many devices can I stay signed in on?
Free allows 3 signed-in devices at once, Basic allows 10, and Pro is unlimited. If you hit the limit, sign out one device from the sign-in screen, then sign in again. Signing out ends that device’s session; your notes are not deleted.
What happens if I lose my password?
Because Deeperguard is zero-knowledge, we cannot reset or recover your master vault password. Without it, ciphertext on our servers cannot be decrypted — there is no “forgot password” email that restores access.
Set up protection early: On Pro, turn on daily encrypted email backups and/or pCloud encrypted backups in Settings as soon as your vault is ready. Archives stay encrypted; you still need the vault password to open them, but you will not lose the only copy if a device fails.
If sign-in credentials drift but you still know your vault password, the app can guide you through vault login recovery using encrypted samples on the server — that is not a master-password reset.
Can I import my existing notes from Standard Notes?
Yes. Deeperguard provides built-in Standard Notes backup import. You can upload your decrypted or encrypted Standard Notes export file directly in Settings.
Where do I open my notes app?
Visit https://www.deeperguard.com/app to access your notes vault. You can sign in using your account credentials or passkey, then unlock your vault.
Get in Touch
Contact us
Questions about the product or the beta: [email protected]. Security reports use the same address with the subject “Vulnerability report”.
Create a vault for notes you cannot leak
Start on Free — 50 MB encrypted storage, sync, and on-device OCR. Upgrade to Pro when billing launches for backups and security extras.
Create free vault Open notes app
About
Who builds Deeperguard
Deeperguard is an independent notes product in public beta. Security reports and product questions go to [email protected].