Skip to content

Share anything,
expose nothing.

DekkoCORE is one platform to share, sign and collaborate on sensitive files, with encryption that no one can break.

  • End-to-end encrypted
  • Zero-knowledge
  • AI-resistant
  • No file size limits
  • Sovereign in AU, US & CA
  • IRAP PROTECTED
DekkoCORE file workspace showing Hubs, sharing status and workflow tags

Supporting 200+ government agencies and 1000+ private organisations with secure sharing and collaboration.

Retire email, FTP and the USB stick

  1. USB: No more USB handovers. Partners open what you share on their own devices, so nothing is copied to a stick, couriered across town or left in a drawer.
  2. Email: Stop emailing PROTECTED attachments. Share files and folders from DekkoCORE instead. People get access to the file, not a copy that lives on in every inbox it was forwarded to.
  3. FTP: Retire the FTP server. Send a 48 GB data package straight from the browser. No file size limits, no server to patch and no shared credentials to rotate.
  4. Cloud links: Out of consumer cloud. A personal Drive or Dropbox link goes wherever it's forwarded. In DekkoCORE every share has a permission level, an expiry date and instant revocation.
  5. Print & scan: No more print, sign and scan. Sign contracts and approvals in DekkoCORE with end-to-end encrypted eSignatures, without the document leaving the platform.
  6. Versions: One version, edited together. Edit the document together in the browser instead of emailing v3_FINAL back and forth. Every version stays in the file's history.
  7. Audit: Know who has seen what. Activity across every Hub is in the audit log. Filter it by Hub and period, export it as CSV, or stream it into Azure Log Analytics.

Everything your team shares, in one sealed space.

Every project in its own secure Hub.

  • Core and Fusion HUBs
  • Upload files and folders, or create new ones
  • Workflow status tags such as Review and Signed
Fusion HUB file list with upload, create and file actions

Your data stays in your country.

IRAP assessed to PROTECTED

Independently assessed under the Australian Government's Information Security Registered Assessors Program.

Australia

IRAP · PROTECTED

Canada

ITSG-33 aligned

United States

ITAR ready

Data centre compliance

  • ISO/IEC 27001
  • ISO/IEC 27017
  • ISO/IEC 27018
  • SOC 1
  • SOC 2 Type II
  • SOC 3
  • FedRAMP High
  • CSA STAR
  • PCI DSS

One secure platform,
with everyone already connected.

One account, every collaboration

Work with any organisation on the network from the account you already have.

Every member strengthens the network

Your next partner may already be on DekkoCORE.

Secure from the first invite

New collaborators are protected as soon as they accept.

Shared platform, separate control

You keep your own tenancy and hosting region, whoever you work with.

Security that doesn't ask you to trust anyone.

  1. Zero-knowledge

    Only your recipients can read it.

    Not even DekkoSecure can open your files.

    See how : Zero-knowledge
  2. AI-resistant

    Built for the age of AI attackers.

    AI makes attacks faster. It still can't read end-to-end encrypted files.

    See how : AI-resistant
  3. Invisible

    Security nobody has to think about.

    Invite, create an account, collaborate. Encryption is automatic.

    See how : Invisible

We built a vault we can't open.

1

Encrypted before upload

Files are never sent or stored in readable form.

plaintext → ciphertext
2

Sealed in transit and at rest

Servers in your chosen country hold only ciphertext.

ciphertext
3

Keys handled automatically

Users never see or manage them. DekkoSecure never has one.

zero-knowledge
4

Opened by the recipient only

Files are decrypted on their device as they open them.

ciphertext → plaintext
brief_to_counsel.pdf Drag to compare

What you see

Brief to counsel

Matter 24/1187 · Privileged and confidential

1. Summary of evidence

The attached material comprises 14 exhibits, including body-worn video, a forensic image of the device seized on 12 March, and three witness statements.

2. Recommendation

Proceed on counts 1 and 3. Further disclosure is required before the committal hearing.

The same file, on your screen and on our servers.
Tenancy policies for authentication and sessions

Total controlat every level.

Enforce policy across the whole tenancy.

  • Enforced 2FA and passkeys
  • Hardware-attested authenticators
  • Session timeouts and banners

Where private cloud and BYOK fall short.

  • Complex and expensiveThey need dedicated infrastructure, HSMs and specialist staff.
  • A central key is a central targetWhoever reaches the key store can unlock everything.
  • Hard to manageRotation, backup and availability fall on your team.
  • End users pay the priceExtra steps push people back to email.
  • Single-tenant by designEvery partner needs an account in every tenancy.

The DekkoSecure answer

One multi-tenant, zero-knowledge platform that everyone shares securely.

Back to the network ↑
  • Who manages the keys

    DekkoSecure: DekkoCORE does it automatically on users' devices

    Private cloud / BYOK / HSM: IT, centrally, often in an HSM

  • What it takes to run

    DekkoSecure: Nothing extra to deploy

    Private cloud / BYOK / HSM: Dedicated infrastructure and specialists

  • Working with other organisations

    DekkoSecure: One account across the network

    Private cloud / BYOK / HSM: A new account in every tenancy

  • End-user experience

    DekkoSecure: No extra steps for users

    Private cloud / BYOK / HSM: Extra steps and workarounds

  • Who can read stored files

    DekkoSecure: Only the people you share with

    Private cloud / BYOK / HSM: Anyone who can reach the keys

Speak with a security expert.

See DekkoCORE working on your own workflows. We'll show you how teams like yours replace email, FTP and consumer cloud within days.

DekkoCOREorDekkoDEMS?Two products for different jobs. See what they share and where they differ.Compare products