Aegis Docs
Built for Law Firms, Healthcare Providers & Sensitive Enterprise Workflows

Your All-in-One Privacy & Productivity Workspace. 100% Local. Zero Cloud. Zero Leaks.

Automate document redaction, deep compliance scrubbing, local meeting transcription, and receipt extraction. Everything runs locally on your computer with AES-256 encryption tied to your Windows identity.

βœ“ 100% Offline Processing
βœ“ Zero Cloud Telemetry
βœ“ Hardware-Tied AES-256
βœ“ SHA-256 Audit Verification
AegisDocs.exe β€” Local Execution Console [Windows 11 x64]
πŸ”’ Air-Gapped Sandbox Active
1. Smart Redaction 2. Deep Cleaning 3. Bates Stamping 4. Local AI Transcripts
Target File: Confidential_Medical_Record_2026.pdf
Automatic Pattern Hits
SSN Pattern: 3 Detected
MRN (Health ID): 2 Detected
DOB & Addresses: 5 Detected
Permanent Blackout Burn

Text layers under approved boxes are permanently purged from document memory.

[βœ“] Verification Check Passed: 0 Residual Bytes
SHA-256 Local Fingerprint

Original: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Redacted: 7f83b1657ff1fc53b92dc18148a1d65dfc2d4b1fa3d677284ddd200126d90699

πŸ›‘οΈ 100% Local Execution βœ“ Permanent Image-Burn Redaction ⚑ HIPAA Safe Harbor Compliant πŸ’³ PCI DSS & GLBA Scanners πŸŽ™οΈ Offline Meeting Transcripts πŸ”’ Windows-Bound AES-256 Storage 🏷️ Bates Stamp Discovery Sets 🧾 Receipt OCR to CSV Export πŸ›‘οΈ 100% Local Execution βœ“ Permanent Image-Burn Redaction ⚑ HIPAA Safe Harbor Compliant πŸ’³ PCI DSS & GLBA Scanners πŸŽ™οΈ Offline Meeting Transcripts πŸ”’ Windows-Bound AES-256 Storage 🏷️ Bates Stamp Discovery Sets 🧾 Receipt OCR to CSV Export
Complete Toolkit

Five Essential Tools. One Local Workspace.

Eliminate fragmented cloud subscriptions. Aegis Docs brings enterprise-grade privacy engineering directly to your workstation.

✏️

1. Smart Redaction Engine

Protect client privacy in seconds. Aegis Docs spots sensitive identifiers and permanently burns blackout boxes into document images so underlying text is erased for good.

  • β€Ί Instant Detection: SSNs, MRNs, Driver IDs, Phone Numbers, DOBs, Addresses, Custom Words.
  • β€Ί Table & ID Card Reader: Finds values printed under labels on driver's licenses and clinical forms.
  • β€Ί Post-Burn Verification: Program re-reads saved outputs to guarantee text cannot be extracted.
  • β€Ί Barcode Alerts: Prompts manual box drawing over 2D barcodes containing repeated PII.
Supports PDF, DOCX, JPG, PNG, TIFF Permanent Burn
🧹

2. Compliance & Deep Scrub

Scan individual files or folders (up to 2,000 files) against regulatory privacy frameworks. Scrub sneaky hidden metadata before emailing documents externally.

  • β€Ί Preset Profiles: HIPAA Safe Harbor, PCI DSS Cardholder, GLBA Financial, and General PII.
  • β€Ί Hidden Metadata Removal: Purges comments, track changes, author properties, hidden text, and camera GPS EXIF.
  • β€Ί Printable Audit Reports: Generate clean HTML/CSV summaries complete with SHA-256 fingerprints.
Batch Folder Scans Zero-Overwrite Safety
πŸ“‘

3. Document & Case Suite

A high-speed batch toolkit designed for legal discovery, court filings, and heavy professional document manipulation workflows.

  • β€Ί Bates Stamping: Apply customized sequential Bates numbers across multi-volume case files.
  • β€Ί Merge & Split: Combine loose PDFs or split by specific page intervals and custom ranges.
  • β€Ί Watermarks & Bulk Rename: Stamp standard "CONFIDENTIAL" warnings and re-index sets.
Preserves Originals Instant Batching
🧾

4. Expense & Receipt Manager

Simplify bookkeeping without revealing financial transaction records or vendor relationships to cloud server indexers.

  • β€Ί Drag & Drop Extraction: Drop PNG, JPG, or PDF receipts directly into the workspace.
  • β€Ί Local OCR: Auto-detects Vendor, Transaction Date, Total, Tax, and Expense Category offline.
  • β€Ί CSV Export: Ready-to-use structured spreadsheet export for Excel or your CPA.
Offline Financial Processing CSV Export
πŸŽ™οΈ

5. Secure Meetings & Local AI Transcription

Capture confidential client consultations and internal board discussions with total peace of mind. Transcribe audio completely offline using embedded neural models.

β€Ί Dual-Channel Recording: Records microphone input and internal computer audio simultaneously.
β€Ί 100% Offline AI Transcripts: Runs localized speech recognition modelsβ€”no audio data leaves your machine.
β€Ί Speaker Diarization: Smart channel detection suggests which speaker spoke each line ("Dr. Lee", "Client").
β€Ί Windows AES-256 Storage: Saved recordings, transcripts, and notes are encrypted directly with your Windows credential key.
Export to DOCX or TXT Encrypted Local Vault
Technical Deep-Dive

Interactive Architecture & Security Explorer

Inspect how Aegis Docs handles encryption key isolation, compliance scanning rules, and verification pipelines.

Windows User-Bound Cryptographic Vault

Unlike cloud services that rely on master server keys, Aegis Docs locks meetings, transcripts, and receipt databases using AES-256 encryption tied to your individual Windows sign-in account.

πŸ”‘
Protection Against Physical Theft

If a laptop is stolen or a drive image is copied, encrypted vault files remain unreadable without your Windows password session key.

πŸ“‘
Zero Telemetry & Offline Integrity

The application operates fully offline. The optional update check downloads only a cryptographically signed manifest (latest.json) without transmitting user metadata.

Local Workstation Security vs Cloud Providers

Standard Cloud SaaS Workspace High Exposure Risk

Files uploaded to third-party cloud buckets β†’ AI models trained on client data β†’ Third-party subpoenas or breach risks.

Aegis Docs Local Model Zero External Exposure

Files remain on local NVMe/SSD β†’ Processing runs in local CPU/RAM β†’ Vault locked with Windows DPAPI / AES-256 key.

SHA-256 Output Verification Enabled on All Export Operations
Transparent Auditing

Non-Destructive Workflows with Built-in Audit Logs

Aegis Docs never overwrites your original source files. Every batch action produces a pristine copy alongside a tamper-evident audit report.

βœ“
Redaction Log.csv Generation

Records timestamp, user ID, original SHA-256 fingerprint, output fingerprint, and item countsβ€”without storing sensitive redacted text.

βœ“
Deep Scrubbing Removal Options

Selectively purge document properties, author names, comments, accepted track changes, hidden text, embedded attachments, and EXIF camera GPS metadata.

βœ“
2,000 File Batch Capacity

Process complex directory trees seamlessly. Includes instant stop capability that gracefully flushes completed records.

Example: Cleanup_Log.csv Output ISO-8601 Timestamped
# Aegis Docs Audit Trail Header
Timestamp: 2026-10-27T19:35:00Z
Operator: J.Miller@LawFirm-Local
Original_SHA256: 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
Cleaned_SHA256: 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
[Status] Cleaned: 14 Comments Removed, 3 Tracked Changes Accepted, EXIF GPS Cleared, Verification Status: PASSED
Transparent Pricing

Simple, Predictable Plans

Choose the right edition for your security requirements. No hidden cloud fees.

One-time purchase Subscription Annual

Basic

Essential document redaction for standard local file workflows.

$149 /yr
  • βœ“ Batch document processor
  • βœ“ True image-burn redaction
  • βœ“ Searchable and password-protected PDFs
  • βœ“ Word (DOCX) and image inputs
Get Basic
Most Popular

Pro

Advanced compliance scanning and deep metadata cleanup for professional practices.

$249 /yr
  • βœ“ Everything in Basic, plus:
  • βœ“ Compliance scanner (HIPAA, PCI and other profiles)
  • βœ“ Batch folder scanning (up to 2,000 files)
  • βœ“ Hidden-content & EXIF metadata cleanup
  • βœ“ Redaction log and scan audit reports
Get Pro

Suite

Complete air-gapped productivity workspace with offline AI transcription and expense capture.

$349 /yr
  • βœ“ Everything in Pro, plus:
  • βœ“ Offline Meetings & AI Transcription
  • βœ“ Offline Expense & Receipt Manager
  • βœ“ Speaker Diarization & Dual-Channel Audio
  • βœ“ Hardware-bound AES-256 vault storage
Get Suite
Developer & Deployment Guide

Deployment & Build Options

Run the ready-to-use executable or build directly from source using the .NET 8 SDK framework.

πŸš€ Standalone Portable Executable

No .NET Install Required

Generate a standalone AegisDocs.exe binary that runs on any modern Windows 10/11 workstation without installing runtime prerequisites.

# Double-click publish.bat to generate standalone binary
.\publish.bat
# Output directory structure:
publish/
β”œβ”€β”€ AegisDocs.exe
β”œβ”€β”€ runtimes/ (Native speech/OCR libraries)
└── models/ (180MB offline transcript neural model)

πŸ’» Build from Source (Visual Studio)

C# / .NET 8.0

Open the solution in Visual Studio 2022 Community with the ".NET desktop development" workload enabled.

# Run unit tests covering finders & scanners
dotnet run --project ReceiptCapture.Tests -c Release
# Launch startup project in debug mode
dotnet run --project ReceiptCapture
πŸ”
Cryptographically Signed Updates Updates verify against an RSA keypair manifest (latest.json) prior to installation, shielding workstations against tampered updates.
SHA-256 Fingerprint Matches Required

Frequently Asked Questions

Important disclosures, limitations, and operational security details.

Does Aegis Docs ever send my documents or transcripts to cloud servers? 100% Offline

No. Your documents, receipts, meeting audio, and transcripts never leave your computer. The only internet communication is an optional update check (downloading one small JSON manifest), which can be disabled at any time.

What are the security limits of the local AES-256 encrypted vault?

Saved receipts, meeting audio, and notes are encrypted with a key bound to your active Windows sign-in account. This protects data against copied folders, stolen drives, or other Windows account profiles on the same PC. However, it does not protect against malware running under your active user session. Export files to secure external media when reinstalling Windows.

How does the system handle handwriting, signatures, or photos?

Names, signatures, photographs, handwriting, and 2D barcodes cannot be detected automatically by textual OCR engines. Add specific names under "Also redact these words or names," and use the manual box drawer to blackout signatures and barcodes.

Why does Windows Defender show a warning during initial setup?

Because Aegis Docs is a newly compiled local utility, Windows SmartScreen flags unsigned executables downloaded from web releases. Click "More info" and then "Run anyway". All releases include SHA-256 build checksums in the repository release logs.