> ## Documentation Index
> Fetch the complete documentation index at: https://docs.kvelden.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Introduction

> Kvelden builds precision cybersecurity infrastructure. This is the documentation for Enclave — our encrypted collaboration platform with client-controlled keys and zero-knowledge rooms.

## What is Enclave?

Enclave is a secure collaboration platform for teams that handle sensitive data. Files are encrypted with AES-256-GCM using keys you control (your KMS/HSM). For the strongest guarantee, **Zero-Knowledge and ZK-Strict rooms** encrypt on your device and store only ciphertext Enclave cannot read — not even if compelled.

<Note>
  Enclave is provisioned by our team — there is no public self-sign-up. [Request access](https://kvelden.com/request-access) or [book a demo](https://kvelden.com/book-a-demo) to get started.
</Note>

<CardGroup cols={2}>
  <Card title="Quickstart" icon="rocket" href="/enclave/quickstart">
    Get your team into Enclave in under 10 minutes.
  </Card>

  <Card title="Core Concepts" icon="book" href="/enclave/concepts">
    Understand rooms, encryption, and access control.
  </Card>

  <Card title="Deployment" icon="server" href="/enclave/deployment">
    Run Enclave as managed SaaS or a self-hosted on-premise virtual appliance.
  </Card>

  <Card title="Key Management" icon="key" href="/enclave/platform/key-management">
    BYOK, HYOK, and HSM integration.
  </Card>

  <Card title="Security & Trust" icon="shield-halved" href="/enclave/security/architecture">
    Architecture, cryptography, and our zero-knowledge design.
  </Card>
</CardGroup>

## The security guarantee

Most security products make an operational promise: "we won't look at your data." Enclave lets you choose an architectural one.

* **Keys you control (BYOK/HYOK)** — the master key that wraps your data lives in your own KMS or HSM. Kvelden never stores it in plaintext. Enclave decrypts server-side only to serve your downloads and the workflows you enable (DLP, signing).
* **Zero-Knowledge & ZK-Strict rooms** — files, chat, and secrets are encrypted on your device; the server stores only ciphertext and holds no key that can decrypt it. **Even under legal compulsion, Kvelden cannot decrypt this content** — there is nothing to hand over. ZK-Strict additionally disables every server-side workflow that would need plaintext.

## Who uses Enclave?

Enclave is built for teams where data sensitivity is non-negotiable:

* **Legal & M\&A** — secure deal rooms for due diligence, NDA-protected document exchange
* **Financial services** — encrypted collaboration meeting SEC, FCA, and MiFID II requirements
* **Healthcare** — HIPAA-compliant file sharing without trusting cloud provider staff
* **Government & defence** — air-gapped deployment, HSM-backed key management
* **Enterprise IT & security** — SOC 2 Type II and ISO 27001 aligned operations

## Compliance posture

| Framework     | Status                              |
| ------------- | ----------------------------------- |
| SOC 2 Type II | Aligned — audit in progress         |
| ISO 27001     | Aligned — certification in progress |
| GDPR          | Aligned — DPA available             |
| HIPAA         | Aligned — BAA available             |
| DPDP Act 2023 | Aligned — India data residency      |
| IT Act 2000   | Aligned                             |

<Note>
  Kvelden operates Enclave against the SOC 2 Type II and ISO 27001 control
  frameworks; formal certification is in progress. See [Compliance](/enclave/platform/compliance)
  for our current attestation status and how to request control documentation under NDA.
</Note>

<Note>
  Have a question not covered in these docs? Email us at [hello@kvelden.com](mailto:hello@kvelden.com) — every message is read by an engineer.
</Note>