Private mode locks a workspace's most sensitive details with a passphrase only your family holds. This page states exactly what that covers, when our servers can still read it, and what it does not change.
With Private mode on. Without it, these details are still encrypted in our database, but with Foliostone's own key, which our servers can open.
Turning Private mode on creates a key for the workspace, locked by your passphrase and by a recovery code shown once. Foliostone stores neither. When a member unlocks, the passphrase travels encrypted to our server, which opens the key and hands it back to that member's browser in a sealed cookie. The key is not kept on our servers.
The owner and administrators see in the security journal who unlocked the workspace and when, failed attempts included, and whether the recovery code was used.
The recovery code replaces it. If both are lost, nobody, Foliostone included, can recover the sealed details. Names, figures and documents stay available.
Private mode is not end-to-end encryption. While a member has the workspace unlocked, our servers read the sealed details in order to show them and run calculations, so whoever controlled those servers at that moment could read them too. It does not cover names, amounts, dates or documents, and it does not change what our banking service, the bank aggregator or our AI provider receive.
