SDS is a secure (and post-quantum-safe) document collection and controlled-access platform. It is designed for organisations that need to receive sensitive documents from clients, patients, or external parties - and protect those documents from the moment they are submitted, through storage, and across every authorised access event. Unlike encrypted file-storage products, SDS collects documents from external parties without requiring them to create an account or install any software. Unlike email or shared drives, no unprotected copy of a document is ever created or transmitted. One document, one encrypted location, every authorised person accessing the same copy.
Multiple authorised staff can access the same encrypted documents without a master key and without the vendor being able to read the data. This means your organisation gets team access, managerial oversight, and staff handover continuity - without weakening the encryption. If the vendor is breached, there is no master key to steal.
Salvanote reached the final 5 in the 2025 NSW iAwards Business and Industry category — recognised for innovation in secure document technology. SDS launches in July 2026. Register your interest to be among the first to access a pilot.
SDS (Salvanote Document Safe) uses Salvanote's unique end-to-end encryption technology to protect sensitive data. Here's how it works in practice: (swipe or drag to navigate the slides)
SDS is architected to keep complexity away from your customers and users entirely. Their experience is simple. The security underneath is not. Until now, organisations have faced an unavoidable trade-off: meaningful end-to-end encryption, or the ability for multiple authorised staff to access the same documents. SDS eliminates that trade-off. For the first time, sensitive documents can be protected by true end-to-end encryption — with no decryption capability held by the vendor or any infrastructure provider — while remaining fully accessible to every authorised person within your organisation. No backdoors. No master key. No weakening of the encryption.
Decades of interface design experience are built into every part of the SDS experience. For your customers, submitting documents requires no account, no app, and no prior knowledge — just a link and an SMS verification code. For your staff, onboarding is a guided device enrolment and biometric registration that takes approximately five minutes per person. Simple, structured, and done once.
True end-to-end encryption means that sensitive data is only ever encrypted or decrypted on endpoint devices. Even Salvanote, the operators of SDS, cannot decrypt the data stored in it. Which means that even if Salvanote's infrastructure were breached, an attacker would retrieve only unreadable ciphertext — not your documents.
Current Cybersecurity is commonly based on some combination of perimeter security, detection and response. The focus is on securing the environment rather than the data itself. Although often sophisticated, this approach still leaves online data exposed to disclosure in the event of an infrastructure breach. It only takes one attacker to find a way through. Perimeter security, however sophisticated, assumes the wall will hold. It won't — not permanently, and not against a determined adversary. The question is not whether a breach will occur, but what an attacker finds when they get in.
protect the data using decryption keys within the infrastructure. And therefore still vulnerable to breach.
SDS is designed so that if documents handled through SDS are exfiltrated, they remain unreadable ciphertext. This is an architectural property, not a policy promise - Salvanote holds no decryption keys and has no capability to read stored documents.
While SDS is incredibly simple to use, there is a lot that goes into it.
Your clients submit sensitive documents through a simple, guided workflow — no account, no app, no password. Everything is encrypted before it leaves their device. Your authorised team accesses the same encrypted document. No copies. No email. No exposure.
Staff access SDS using device-bound biometric authentication or passkeys — no passwords to share, steal, or forget. Each staff member’s access is tied to their enrolled device and their own biometric. Credentials cannot be borrowed or transferred.
Your organisation chooses the AWS region where encrypted data is stored — ensuring it stays within the jurisdiction you specify. No data leaves your designated region.
Choose no-code integration and use SDS immediately by just adding a single link to your site. Or integrate our API - it's your choice.
Your customers engage via your familiar channels, or go to YOUR website to find the link that will allow them to send their data securely. From there, they see a co-branded page that will contain your organisation's name and logo.
SDS works with any modern browser. Users can enroll any computer, and your customers can use any device, including a mobile phone. There is nothing to install, and no passwords to remember.
Phishing attacks rely on stolen credentials and malicious links. SDS removes both: no passwords exist to steal, biometric authentication is device-bound, and document collection can run entirely without email-delivered links.
Easily create forms to request any sort of information from your customers, including files. Save forms as templates and reuse them, or copy forms and edit. Simple for your staff to use, but powerful.
Encrypted data is retrieved, decrypted, and viewed in plain text on a secure screen provided by the SDS service. There is no local storage of data or installed software. So SDS does not require an extra layer of risk management or monitoring. Device theft is not a security risk.
Documents exfiltrated from SDS remain unreadable ciphertext — removing the extortion leverage that stolen data provides. This protection is built into SDS at launch. Coming soon: Immutable storage ensures your documents also remain accessible to you after an attack.
Our Pluggable Encryption Architecture (PEA) simultaneously uses classical encryption algorithms and Post-Quantum Resistant (PQR) algorithms. This combination defeats known attack vectors + HARVEST now DECRYPT later.
SDS’s architecture is designed to support assessment against several security compliance frameworks, including Australia's Essential 8, ISO 27001, and SOC 2 Type II. SDS is built on AWS, which is compliant with these at the time of writing. Formal certification of SDS itself has not yet been obtained. If this is important to your procurement process, please contact us to discuss.
Our SDS product provides the following Quantum features, in addition to ensuring that all our encryption algorithms are Post-Quantum Resistant. Click the plus signs to expand details.
Sourcing Quantum Random Numbers (QRN) from a quantum device for use by classical computers need not involve a quantum device at the user end. Quantum Technology Companies (QTC’s) transmit QRN over a secure channel (e.g., using Quantum Key Distribution (QKD) or an encrypted classical channel). So they remain protected during transmission. However, the risk is at the points where they are generated, stored, or used. SDS can be used to encrypt QRN at their source, transmit at PQR standard along classical channels and then decrypt just-in-time when used by a classical computer. This offers classical computers the opportunity to access QRN, that firstly cannot be compromised, and secondly, without the need of expensive hardware, nor the time and money for the integration of the hardware into existing classical architecture. This is an add-on service to existing Quantum Technology Companies (QTC’s) who supply QRN on demand. In other words, SDS will greatly improve the security at the end-points of QRN transmission without loss of security during transmission.
The one-time supply of software, or the use of hardware, to generate QRN locally is open to all the weaknesses of a centralised source of randomness. They are high- value targets because compromising them compromises all systems that rely on them. SDS will be able to safely store the ‘seed of randomness’ until needed to generate encryption keys. SDS can supply storage of QRN by classical computers until needed without any loss of security because the infrastructure supporting the transfer and storage of QRN is agnostic to any decryption capability. This service encourages an increased use of QRNG by classical computers.
QKD distributes, entirely securely, keying material used for quantum enhanced encryption keys. However, computers cannot access this keying material without expensive quantum hardware and networks of optical fibre extending to every [Type text]Page 2 endpoint. There is also the restriction of distance covered by the optical cabling. SDS can distribute quantum derived keying material over non-secure networks (including satellite) without any loss of security, and without the disadvantages of cost, time and distance. The infeasibility of scaling QKD limits its usefulness to grow the Quantum Technology (QT) sector. However, SDS has the same level of security without the disadvantages of QKD, and as such, offers a way to grow the QT industry by increasing the use of QRNG by classical computers.
Salvanote’s technology can de-risk the use of QRNs (Quantum Random Numbers) by classical computers and and consequently accelerate the commercialisation of QT for use by classical computers by removing these obstacles. Capabilities:
As far as we know, there is no other software that can make the above claims. This not only offers a huge improvement to current security measures protecting online data in files within Australia BUT it also removes significant barriers for classical computers to use QT. The same technology can be applied to other products in our roadmap, such as our Secure Encrypted Messaging Platform which provides cryptographically verified identity confirmation between any number of parties. Salvanote cryptography can be potentially used to encrypt active databases, making data unreadable ciphertext, and thus protected from known infrastructure and phishing attack vectors, as well as being quantum resistant. Salvanote technology incorporates a hybrid encryption model that greatly mitigates the risks for classical computers in the transition of cryptographic systems to quantum-resistant cryptography, enhanced with Quantum Random Number Generation (QRNG), with immediate effect and beyond the 2030 target set by the Australian Signals Directorate (ASD) and the 2035 target set by the National Institute of Standards and Technology (NIST).
1. Overcoming implementation challenges that hamper adoption.eg our technology can secure endpoints in the energy grid (particularly private homes) by delivering quantum random numbers and encryption keys to these endpoints without the limitations normally associated with quantum-connected devices. 2. This software can assist those organisations with long-term confidentiality needs or more complex cryptographic infrastructures, whose transition is more urgent. It can also assist those organisations that move at a slower pace due to legacy constraints or lower risk profiles.
Meet the leadership team behind Salvanote SDS:
A wide-ranging background in research, education, property development and counselling. A teacher of Mathematics for twenty years, Head of the highschool section of a school. A past member of the ACE, the ACEA and the NSAA. Experienced in leading specialist teams. An experienced seminar presenter, public speaker and project manager. An entrepreneur with past success in startups.
A Certified Professional by the Australian Computer Society, and member of AISA and IEEE, Geoff has designed and built software, systems and infrastructure projects for 30+ years, with a focus on security and sustainability. He has experience in architecting and building large-scale online systems and applications eg Pfizer, Symantec, Samsung, Energy Australia, St George Bank, others, as well as startups.
An experienced software development manager and senior developer with over 30 years in the industry. Extensive experience with SaaS systems and full-stack development projects. He also brings database and AWS tooling knowledge as well as API integration know-how. His prior cryptographic experience converting theoretical encryption blueprints into Salvanote's secure app for schools, brings valuable expertise to the team.
SDS is priced on value, not on headcount.
Most document security tools charge per staff member. SDS doesn’t. The number of staff in your organisation doesn’t determine the consequences you face from a breach — the number of your clients, customers, patients, or applicants whose documents you handle does. That’s the axis SDS pricing reflects.
SDS pricing is based on the number of external parties whose sensitive documents SDS protects for your organisation, and your sector’s risk profile. We call each unique external party an entity: your customer, client, patient, or applicant whose documents SDS holds. There are no per-user charges.
A medical practice and an accounting firm face different regulatory and reputational consequences from a breach affecting the same number of people. Pricing reflects that difference through a sector adjustment applied to the per-entity rate.
One pilot is already confirmed. Conversations are underway with further candidates. If you would like to be considered for one of the remaining places: Contact Us.
Organisations coming on board after the pilot places have been filled will do so at standard commercial rates.
A short conversation of 15 to 20 minutes is usually enough to provide an accurate monthly figure for your practice size and sector. We will ask about the number of external customers, clients, patients, or applicants whose documents you currently handle, your sector, and how you currently collect sensitive documents. No technical knowledge required.
I have reviewed and worked with this technical information in depth, and understand from the information provided to me that the technology as described in the patent is designed to enable strong end-to-end encrypted exchanges of data between remote devices, where such data can be retrieved, read and used by an authorised third party without requiring a "backdoor", and without diminishing the strength of the encryption.
We are interested in Salvanote because of its potential to protect identity and data of clients.
[Salvanote's SDS offers] protection of client data, which is very important to us.
Should Salvanote be made available to our industry, we might be wiling to pay $10 per data record per year, to protect private data.
