Help

Today reads the other applications and lists the day: today’s events from Calendar, the cards due today and overdue in Tasks, the overdue invoices Books has handed over, the dates of the next fortnight and the documents you had open last. Each row opens the thing in its own application. Nothing is kept or sent anywhere: it is read again each time. Free.

Each application keeps its own work. The others read it where it is, on this device, and never change it. Contacts is the address book for all of them: Calendar’s guests, a card’s members in Tasks, a letter’s recipient in Docs, a customer in Books and a client in Practice can each be chosen from it, and somebody new added to it. Calendar can show the cards due in Tasks, birthdays and anniversaries, Plan’s milestones and the dates Books, Practice, Keep and Write hand over, each ticked on or off under My calendars. Ctrl K finds people, events, cards, notes and the words of documents as well as tools. Settings, under Privacy and data, turns the search of your work and the address book in other applications off. Keep and Practice are encrypted and hand over nothing unless you turn it on in their own settings, and then only a name, the kind of date and the day.

Open the Workspace and pick an application. Work is kept in this browser as you type, with no account. Choose a folder in Settings to have it written to disk as files too. Free for everyone, at home and at work.

In Docs, Review, Assistant, and in Notes, the Assistant button on the left or the command palette, it improves, corrects, shortens or summarises the words you select (or the whole document or note), pulls out a note's tasks, or does what you type. What it writes is shown first; Replace or Insert after puts it in the document, and Undo takes it back. It uses the model your browser carries, on your device, so nothing leaves it: Chrome on a computer has one, fetched once the first time. To use ChatGPT, Gemini or Claude instead, press Set up and paste an API key from OpenAI, Google AI Studio or Anthropic. A chat subscription cannot be used by another site; a key is billed by that company for what you ask. The key is kept in this browser and nowhere else, and the text you press Run on goes from your browser to that company alone, never to us. The dialog says where the text is going before you press Run.

Open the Sovereign Suite and drop a file on it: it lists every tool that can work on it. The first visit offers a short tour. Set up asks a few questions about your organisation and fills in the frameworks, policies and a first-90-days plan that fit. Search everything (Ctrl K, or /) finds any tool, service or record. Pro.

Its records are encrypted in this browser from the first one written, with AES-256-GCM, under a key the browser keeps beside them and will not let a page copy out. That keeps their words out of the browser’s files, but anyone who can use this browser can open them. Give the workspace a passphrase in Your data and they open only with it: the key is then wrapped under one made from the passphrase with Argon2id, and the browser’s own copy is taken away. Nobody else holds the passphrase, so if it is forgotten the way back is a sealed backup.

In the Sovereign Suite, Frameworks and controls tracks twenty frameworks from one set of controls, among them SOC 2, ISO 27001, PCI DSS, NIST 800-53 (the Moderate baseline) and 800-171 Rev. 3, SOX IT general controls, the EU AI Act and Cyber Resilience Act, ISO 22301 and the Essential Eight. Each framework’s mapping to the controls is guidance, to check against its own text. To bring in one of your own, open Frameworks, choose Your own framework and import a CSV or JSON file with a reference and a title or text on each row; a controls column (IAM-07) or a maps column (soc2:CC6.1) maps it as it comes in, and the rest can be mapped by hand or from suggestions. Add your own control from the Controls tab; it can be mapped to any framework’s requirement and retired later. The Crosswalk tab, Between two frameworks, shows how far the controls of one reach into another and what is left to do. For a SOC 2 Type II period, set how often each control operates and the period coverage shows any interval with nothing recorded. In the risk register, a risk given FAIR’s ranges is put in money on the Quantified tab, and the board report shows the year’s expected loss of them all, the one-year-in-ten figure and the risks that carry most of it.

Staff security records takes the staff list from BambooHR, Rippling, HiBob, Personio, Gusto or Workday, as CSV or JSON; the asset inventory takes CrowdStrike Falcon’s, SentinelOne’s or Defender for Endpoint’s device list and marks every device it does not list. In an incident, tick the Cyber Resilience Act’s clocks for an exploited vulnerability or a severe incident: 24 hours to the early warning, 72 to the notification, and the final report 14 days after a fix or a month after the notification.

Connect your systems reads five providers directly, read-only, when you press a button or when a read falls due. The requests go from your browser to your provider and nowhere else: the Suite’s security policy lets its page reach those providers and no other site, and no other page on this site may reach them. Tokens stay in the tab’s memory unless you choose to keep a GitHub or GitLab token on your device, sealed with a passphrase. Each read is kept in the evidence locker as the provider’s answers, unchanged, with its SHA-256, against the SOC 2 and ISO 27001 controls it supports, and its accounts go into the access review.

GitHub reads members, owners and outside collaborators, who has two-factor authentication off and whether it is required, branch protection on default branches, and secret scanning and Dependabot with their open alerts. You paste a fine-grained personal access token with read-only permissions; only an owner’s token sees the two-factor settings.

GitLab reads a group’s members and their roles, its owners, members dormant or never active (from the billable members an owner can read), guests with no end date, whether the group requires two-factor authentication, protected default branches, force pushes and direct pushes, and secret push protection. You paste a personal or group access token with the read_api scope. It reads gitlab.com only: a GitLab on your own domain is not reached, because the page’s security policy cannot name every company’s address. GitLab does not tell a group which members have two-factor on.

Microsoft 365 and Entra ID reads users, guests and their last sign-in, who has registered for MFA, who holds each administrator role, and conditional access policies and security defaults. It needs an app registration in your own Entra ID (free, about ten minutes, with the steps in the Suite) with four read-only permissions an administrator consents to. Sign-in times and MFA registration need Entra ID P1 or P2.

Google Workspace reads users, their last sign-in and whether 2-Step Verification is enrolled and enforced, and super admins, delegated admins and admin roles. It needs an OAuth client in a Google Cloud project of your own, set to Internal so Google needs no verification, with two read-only Admin SDK scopes.

Okta reads users, their last sign-in and enrolled factors, administrators, and whether sign-on and authentication policies ask for a second factor. It needs an OIDC single-page app of your own with three read-only Okta API scopes, and this site added as a Trusted Origin. It was built from Okta’s documentation and has not yet been tried against a live Okta organisation; it reads an okta.com domain, not a custom one.

Each place read is due again after the interval you choose. When Connect your systems is opened, what is due and still connected in the tab is read again by itself, and the rest is named with what it needs; while the Suite stays open it can also read every connected system again every hour, four hours or day. A read is a snapshot taken while the Suite is open, not monitoring: nothing is read while it is closed, and nothing signs in on its own. Only what a provider publishes can be read, so GitHub cannot say who is dormant, and Google Workspace has no guest accounts to list. AWS, Google Cloud and Azure are not connected, because most of their APIs do not answer a browser: their exports are read as files in Test exported settings, from the provider’s own command run with your own credentials.

An illustration of the jobs, not a customer’s story, at a company of ten where the person who looks after security is also doing something else. On Monday a customer’s security questionnaire arrives as a spreadsheet: most of its answers are drafted from the answers approved last time, the rest are written once and kept, and the same spreadsheet goes back. On Tuesday the quarterly access review is due on the compliance calendar; user lists exported from the email, code and cloud accounts are matched to the staff list, someone who left in August still has a code host account, and the review records it closed. On Wednesday a release goes out: the lockfiles become an SBOM, nothing critical or known to be exploited is open, the files are signed, and the release record says pass. On Thursday a new payroll supplier is added to the vendor register with its SOC 2 report, and a risk is raised against it with its treatment. By Friday each of those has left a piece of evidence with its SHA-256 against the controls it supports, SOC 2 readiness has moved on by what they cover, and the registers are saved to a file and exchanged, encrypted, with the one colleague who reviews them.

Open the Photo Editor and open a picture (JPEG, PNG, WebP, HEIC, TIFF, camera raw, a Photoshop PSD), start from a size, or try the sample. The start screen offers a tour of four stops. File, Export As writes a copy without the place and the camera unless you say otherwise. A picture over 40 megapixels, a PSD, a TIFF or a project among them, opens scaled to fit, and the status line says by how much. Pro.

In the Library (File, Library), New copy makes a virtual copy of the photos picked: settings, rating and label of its own for the same photo, kept in the photo’s sidecar. Smart collection keeps rules (rating, flag, label, keyword, camera, lens, ISO, date, develop settings) and fills itself as photos change; Ctrl Z undoes a copy or a smart collection made or removed. Picks and collections are kept for each folder, not for its name, so two folders called the same keep their own.

Develop’s Lens section finds the lens from the photo and takes out its distortion, colour fringes and vignetting, from the lensfun database (CC BY-SA 3.0), served from this site. Transform’s Upright buttons straighten verticals and horizons from the lines in the picture, and Guided from two to four lines you draw on it; Effects has a vignette after the crop, in highlight priority, colour priority or paint overlay, and grain; Calibration turns the camera’s primaries. A Lightroom sidecar’s white balance in kelvin is measured from a raw file’s own as-shot reading, and saved back in kelvin. F, or Full window, gives Develop the whole window: the picture large, its histogram, and the sections beside it.

Open PDF Studio and open a PDF, or try the example. Edit changes the words already on the page, in the same font where it has the letters; when a paragraph grows, the text below it moves down, or its words flow on into the paragraphs after it and onto the next page, as the panel says. F7 checks the spelling, and Ctrl+H replaces a word or a phrase on every page, in the page’s own text, and Ctrl+L shows the document full screen, a page at a time, to read or present from, and Ctrl+Shift+Y reads it aloud in a voice on your device. Changes not yet saved are kept in this browser until you save or discard them, so a closed tab or a crash does not lose them: the next time PDF Studio opens, it offers them back. OCR makes a scan searchable, Forms finds and makes fields, Fill and sign puts your signature, initials, the date, typed words and ticks on a page that is not a form, Comment adds notes, highlights, lines, arrows, clouds and callouts that any reader shows, Compare shows what changed between two versions, and Batch runs the same steps over many files. T, or the I-beam in the status line, lets you select the words on a page to copy, highlight, underline or strike through them; type a number into the page number to go to that page. In Chrome and Edge, Save writes the file back where it was opened from, and Save as asks where; elsewhere Save downloads a copy. Drag a page’s thumbnail to move it, or right-click it to turn, copy or delete the page; drop PDFs or pictures between thumbnails to put their pages there. With Select text on, the document’s own links can be followed. In Fill and sign, Enter puts the chosen thing in the middle of the page, for the arrow keys to move. Pro.

Redact in PDF Studio takes the words, the pictures’ pixels and the parts of lines and shapes under each box out of the file, and a scan stays a scan with its recognised text. A gap the exact width of a word can give the word away, so Hide how long the words were is on unless you turn it off: each gap is given a width of its own, chosen at random between two and a half and four and a half times the size of the type, the rest of the line moves up to it, and the box drawn is that width. Neither the gap nor the box then follows the length of what was taken out. A box over a picture, a line or turned text keeps its own size, and the report after redacting says how many did.

In PDF Studio, Redact, Save and prove saves the file and reads the saved bytes again, separately from the code that redacted it, for every word the session redacted and any you add; Prove a saved PDF does the same for a file saved earlier. In Case, Produce, Prove the last production reads the production’s zip the same way, with the words its redactions took away. It looks in the text of every page of every revision (the file cut at each incremental update, as a reader of the earlier version would see it), invisible text included, so an OCR layer is read; every object and stream in the file, decompressed, whether the current file uses it or not; the document’s details and its XMP; form fields, bookmarks, annotations and attached files; and, for a production, the load files, the text files, the logs and every PDF and native in it. A word is matched in any case, through ligatures and soft hyphens, and split across pieces or lines. Asked to, it also reads the pictures with OCR, on this device.

If a word is found anywhere, there is no certificate, and the places are listed. If none is, it signs a certificate with this browser’s key (the one a receipt uses): the file’s SHA-256, every place it read and how many of each, whether OCR ran, whether the lengths of what was taken out were hidden, and for each word a salted hash rather than the word. Anybody can check it, free, on Verify: type a word you already know and it says whether that word was one of those looked for, and choose the file to hold it to the certificate and search it again yourself. A short word or a few figures could be found again from its hash by trying every possibility, so those hashes are left out unless you ask, and the certificate says how many were.

What it cannot show: anything outside the places it lists; words drawn as shapes, or in a font with no map back to letters, that no reader of text can see; the words in a picture when OCR was not run, and OCR can misread; an encrypted file, which it does not read (prove the copy saved without its password). It is this browser’s own account, like a receipt: the signature shows the certificate was not changed, not that the browser told the truth.

In PDF Studio, Check, PDF/A converts a file to PDF/A-1b, 2b, 2u or 3b: fonts embedded, an sRGB output intent, scripts taken out, XMP written. It then checks the file against the rules of ISO 19005 a program can decide, each named by its clause, and the file says it is PDF/A only if all of them pass. The check is not veraPDF and does not cover every rule veraPDF does; the report says which it leaves out. Tags edits the tag tree and the reading order, numbered on the page; PDF/UA checks the conditions of ISO 14289-1 a program can decide and lists those for a person. Neither check is a certificate of conformance.

Quick access (Ctrl Shift Space, or Q) opens a search box over any screen: Enter copies the password or the code, Ctrl Enter the username, Alt Enter the two-step code, and Shift Enter opens the item. Vaults, in Settings, group items inside one Keep; a hidden vault’s items, like an archived item’s (Archive on the item, or A), stay in the Keep and its copies and are left out of the lists, search, quick access, the dates and the health check until they are brought back.

When a recovery key is made, Split it among people prints a card for each trusted person; any number you choose of them, together, open the Keep from the lock screen (Use the recovery key, then Put it together from shares), and fewer give away nothing of the key. Health lists the logins on sites that take a passkey with none noted, from the passkeys directory that travels with Keep. Any item, a login, a note or a code as well as a document, can carry files. Pro.

Open Keep, make a Keep with a passphrase, and print the emergency kit with its recovery key. Add documents (or scan them with the camera: the page’s edges are found, and its words read on the device so a search finds it), records such as a passport, a policy or a warranty, logins and two-step codes; their dates appear under Dates, a passport’s nine months ahead. Health gives a score out of 100 and every login to fix, each with its fix. Sign in, on a login, copies the username, then the password, then the code, as you come back to the tab. Share sends one item as a file that stops opening after a time, or opens once, or moves it to your other device by QR code. Legacy writes a letter, a plan and a package for one person, which they open free at /keep-open, and a drill opens it as they would. Settings has travel mode, which leaves only what is marked safe for travel on the device until you bring the rest back from your backup. Sync saves the whole Keep as one encrypted file, or keeps it in a folder of your own. Pro.

Keep holds the papers of a life, the passport scan, the will, the deeds, the pension letters, and the passwords and two-step codes that open everything else, on your own device, encrypted before anything is stored. There is no account to make, no copy on a server, and nothing for anybody to hand over, lose in a breach or read, OBSCURA included.

That is the difference from 1Password and Bitwarden, which keep an encrypted copy of your vault on their servers so that it can sync, and from document vaults and digital-legacy services, which store your papers for you. Keep stores nothing of yours anywhere but where you put it, and costs nothing to run beyond the subscription, because there is nothing to run.

In plain words: your passphrase is turned into a key slowly and deliberately, so that guessing it is expensive; that key locks a second, random key; and the random key encrypts everything. Changing the passphrase re-locks the random key and nothing else. The recovery key in the printed emergency kit is a second lock on the same random key.

• Passphrase to key. Argon2id, 64 MiB of memory, 3 passes, a random 16-byte salt (the reference code, compiled to WebAssembly). Where WebAssembly is switched off, PBKDF2-HMAC-SHA-256 at 600,000 iterations, and the Keep says so.
• The vault key. 32 random bytes, made on your device, locked under the passphrase’s key with AES-256-GCM.
• Your data. AES-256-GCM with a fresh random 96-bit IV for every file and every save, under a key derived with HKDF-SHA-256; each part is bound to its place, so one cannot be swapped for another.
• Recovery key. 160 random bits, printed as nine groups of four letters and digits, the last a check that catches a mistyped character.
• A passkey, if you add one. WebAuthn’s PRF extension: the authenticator gives 32 bytes for a random salt only after checking you; HKDF-SHA-256 turns them into a key that wraps the same vault key with AES-256-GCM. Adding one asks for the passphrase.
• Where it is kept. Your browser’s private file system for this site, as encrypted files; nothing in the clear in local storage, the database or the offline cache. Each part is written whole or not at all, so a device that runs out of room keeps the Keep as it was last saved, and Keep says so and offers it as a file with your change in it.

Every encryption is the browser’s own WebCrypto, apart from the ciphers KeePass databases need that WebCrypto lacks, written from their specifications and held to their published test vectors. A file changed on the disk fails its integrity check and is reported, never shown as something it is not. Keep makes no request to any server while you use it, except for its own code and one check you can choose to run: whether a password appears in a published breach, which sends five characters of the password’s hash, never the password. Keep’s threat model says what this protects against and what it cannot, and /verify shows how to watch the network yourself.

A whole Keep saves as one encrypted .okeep file. In Chrome and Edge you can choose a folder, and Keep keeps that file up to date there and reads it back; make it a folder that Dropbox, OneDrive, Google Drive or iCloud Drive already keeps in step, and your phone and your computer share one Keep, with only ever the encrypted file passing through. When both have changed, the two are merged item by item, the later change of each winning, and Keep lists what came in. In Firefox and Safari, which give a page no folder, you save the file and open it on the other device yourself. A second Keep, for the household, is shared the same way through a folder you all use.

A second Keep is an ordinary Keep beside the first, on the same device: its own passphrase, its own contents, its own recovery key and its own Sync. Make one in Settings, under Keeps on this device, with Make another Keep. At the lock screen, type either passphrase and the Keep it belongs to opens; the other stays locked, and nothing in it is read. Keep tries the passphrase on every Keep here each time, so it takes as long to open one as the other. Each passphrase must open one Keep only, so Keep refuses a new or changed passphrase that another Keep here already opens with. Change a Keep’s passphrase in its own Settings; remove the other one from the same list. A second Keep is not hidden: anyone using this browser can see in its storage that there is more than one Keep, and their names, though not what is in either.

Write the letter you would want read: who to call, where the will is, which accounts to close. Choose the papers one person would need, and Keep seals them, with the letter, into a package with a passphrase of its own, and writes a sheet of instructions to print. They open it at obscuraos.com/keep-open, read-only, with no account and no subscription, so nobody is ever locked out of what was left for them. A drill opens it as they would.

Choose Import, say which manager you are leaving, and Keep shows how to export from it: 1Password (as .1pux or CSV), Bitwarden (as JSON, plain or password protected, its .zip with attachments, or CSV), KeePass or KeePassXC (the .kdbx itself, or XML or CSV), Keeper (JSON or CSV), Enpass (JSON), LastPass, RoboForm, NordPass, Proton Pass, Dashlane, Chrome, Edge, Firefox, Safari or Apple Passwords (as CSV), or the site’s free KEYS vault. A KeePass database is read as it is, KDBX 4 or 3.1, encrypted with AES-256, ChaCha20 or Twofish, with its master password and its key file if it has one, attachments and all. Logins keep their folders, favourites and password history, and a login’s one-time password secret becomes a two-step code beside it. Cards, identities, passports, keys and the rest become records of their kind, and custom fields stay fields, the hidden ones hidden. Aegis and 2FAS backups bring in two-step codes. Before anything is added you see what comes across and what does not, with the reason, and Undo takes the whole import out again.

Leaving is as easy. Export everything writes a KeePass database (KDBX 4, Argon2id and AES-256) with every file as an attachment, which KeePass, KeePassXC and most managers open with its password; or Bitwarden’s JSON, protected with a password you choose, which most managers read but which has no place for files; or, in the clear, Bitwarden’s .zip with the files beside it. Keep reads each of them back.

Open Practice, start a practice with a passphrase or open a practice file. Clients and matters, the conflict check before a matter opens, timers and time in six-minute units, pre-bills, invoices and credit notes, statements of account, LEDES 1998B and 98BI files with UTBMS codes, client ledgers that cannot go below zero and the three-way reconciliation, the office account reconciled from a CSV, OFX or QIF statement, workflows whose steps move with a matter’s key dates, the diary and limitation dates, documents in folders with versions, templates with sections for some matters only, a precedent bank, threaded email, letters signed on the device (an electronic signature, not a qualified one), intake forms saved as one HTML file whose answers come back encrypted, and reports from realisation to lockup, all encrypted in the browser. Pro.

The Words tab of the inspector takes a transcript: the JSON SCRIBE saves with Time each word ticked, or an SRT, WebVTT or Whisper JSON file. Sound runs no speech model of its own. Choosing words selects the audio they were said in; Delete cuts them from every track and the words after move up, and Cut fillers takes out every um and uh in one step. Where a file times only each line, the words are placed by their length, and the tab says so. Save as SRT or WebVTT writes captions that follow the edit.

Add a label track from the project menu; B labels the playhead, or the selection across its length. Drag a label by its flag, double-click it to rename it, and use its track’s menu for Label sounds, labels to markers, and Audacity’s label files in and out. Split at silences, in Effects, cuts a clip between the sounds in it, and can take the silences out. A clip’s envelope (its menu, or Edit on the clip in the Clip tab) is volume that moves with the clip. The DeClipper, under Noise, draws again peaks that were cut flat. Presets, in the Effects tab, saves a chain to put on another track; Save the tracks as a template, in the project menu, offers them under Tracks when the next project starts.

Seal each recording as evidence, in the menu beside the tempo, hashes every second as it comes in, chains each hash to the one before, and signs the recording with this browser’s key when it stops. Sealed recordings, in the project menu, saves the recording with its record; anybody can check the two free at /verify, which shows from which second a changed recording differs. Pro.

Open Sound and start a project, open WAV, MP3, FLAC, AAC or Ogg files, or record from the microphone. Drag across a track to select, S splits at the playhead, Effects writes an effect into the selection: EQ, compressor, noise reduction, reverb, pitch, tempo, loudness and more. FX on a track, or the Effects tab of the inspector, puts effects in a chain that is heard as it plays; Plug-ins there installs your own from a .js file. The track menu shows its volume or pan automation and its spectrogram; the tempo button sets the metronome and a count-in. X shows the mixer: each track’s inserts, sends, output and fader, buses (Reverb return makes one with a reverb), VCAs, and the mix’s true-peak, phase and vectorscope meters. Punch in and out on the selection, and the pre-roll, are in the menu beside the tempo; with Loop on, each pass is a take, and clicking or sweeping across a take in its lane comps it in. On a track shown as a spectrogram, drag a box (Alt for a lasso) and Heal, Turn down or Remove it. Drag the playhead’s handle in the ruler to scrub; the speed button beside the metronome plays at half to twice the speed. Interview clean-up, in Effects and the project menu, trims and levels each speaker and fills the gaps with room tone; Show notes saves the markers as timestamps. Export makes the mix, each track or each region as WAV, FLAC or MP3, or Opus or AAC where the browser can, at the loudness each platform asks for, with the markers as chapters; the project menu processes many files in a batch. Keyboard shortcuts (?) can be changed, or set to Audacity’s. Pro.

A task in the diary has a priority and where it stands; yours are on Today under Your tasks, overdue and high first. Set a budget on a matter (its Overview) by phase; time can name its phase, and at 75% and 100% of the estimate given the matter and Today say so until you record that the client was told. On Risk: Assess a client for money laundering risk (the level, and whether enhanced due diligence is required, are worked out as you answer), and Screen against the sanctions list with the consolidated list file you download from the government yourself (ConList.csv, or the UK Sanctions List as CSV): nothing is fetched, a possible match needs your decision and a reason, and every client is recorded as screened with the file’s SHA-256. The complaints register counts the eight weeks to your final response and the six months the client then has. On a matter: Client money, Ask for money on account, writes the letter and marks it received when the money reaches the ledger; your own payment link (Settings, The practice) goes on invoices and those letters, with a QR code. Documents, Make a bundle, puts the matter’s documents under sections in one PDF with an index, page numbers and bookmarks. Close the file goes through the checklist and sets the date it may be destroyed; Risk lists the files due.

In Practice, on a matter, choose Save a matter file. It writes one encrypted .omatter file holding the matter, its time, bills, documents and diary, and adds what the other applications on this device hold for it: the review from Case (coding, tags and productions, from the case linked to the matter or whose name holds its number) and the matter’s invoices from Books (those whose reference begins with its number). Lock it with a passphrase, and also, if you like, to colleagues’ age keys from KEYRING’s address book. Open the file in Practice, in Case (Share), in PDF Studio or in Books (File): each takes only its own part and keeps the others sealed, as they were, and saving it again writes them back byte for byte. In PDF Studio, File, Add to the matter file puts the document on screen in the matter’s working files.

Taking a file in shows every record it would add, change or take out, beside what this device holds: a change only they made is ticked, one made only here is kept, and one both made is a conflict for you to decide. Nothing changes until you choose. The file carries one audit trail for all four applications, each save sealed with this browser’s own key; a file whose trail, manifest or any part has been changed is refused, and the window says what failed. A part for an application your plan does not include is never opened on this device: the server does not send that application’s code. What it cannot do: anyone with the passphrase can make a new file and seal it with a key of their own, so a seal means most when you know the device that made it, and the times in the trail are that device’s clock.

Open Vector and start a document at any size, or open an SVG from Illustrator, Inkscape or Figma. The tools are down the left on Illustrator’s keys (V, A, P, N, M, L, T); Properties, Layers, Artboards and History are on the right. File, Export makes SVG, PNG up to 32,768 pixels a side, or a PDF with the paths kept as paths and the words as text that can be selected. The scissors (C), the knife and the eraser (Shift E) cut and rub out on the curves; Object, Simplify takes out anchors; Ctrl D repeats the last move, scale or rotation, and Transform each turns every object about its own centre. Properties, Fills and strokes gives one object more than one of each; Object, Pattern makes a swatch from a drawing; Object, Recolour artwork changes every colour at once. While typing, select letters to give them another face, size, weight or colour, on a path as well; the Type menu changes case, and Edit, Find and replace goes through every text. Object, Average lines up anchors; Select, Same picks by stroke weight, opacity, blending, appearance, symbol or text style; Object, Clean up takes away stray points and what nothing uses. The measure tool gives the distance and angle between two points, and a number field takes a sum such as 100 + 20, 50% or 10 mm. File, Record how this was drawn keeps every operation as an Authorship record, and File, Save the authorship record writes the .oauthor file anyone checks free at /verify-authorship, which replays it as pictures. Pro.

Open Erase and choose a passphrase. Add your details, then New request: choose the organisation, the law and the right, and the letter is written as you go. Send it from your own email or as a PDF, mark it sent, and the deadline is counted. Note replies on its timeline, or choose Paste a reply: Erase reads it by fixed rules on the device (did it, did part, wants proof of identity, refused, more time, holds nothing), shows the phrases it went by, and offers the next step and its letter; you can always choose otherwise. What comes next, on each request, gives the steps its law allows after it with their dates: the chaser, an appeal where a state gives one, the complaint to the regulator. The case file gathers the facts, the timeline, the letters and what came back into one PDF, and a complaint pack puts the complaint in front. The Directory lists 143 brokers’ and companies’ own routes and the public services, such as the Telephone Preference Service, that reach many at once: tick several and choose Write to them, starting from a goal (stop marketing, purge, find out), to send one letter to each as a campaign, from a queue; the campaign chases the overdue ones the same way. The Data map lists where your data is, from your requests, a checklist and an exported mailbox file, and saves as a spreadsheet or a report. Re-listing keeps the dates to look at brokers again, opens each one’s page, and records what you found. The Overview says what needs you. Plug-in packs (Settings) add organisations and letters; their code runs with no network. For one letter without tracking, the free ACCESS tool writes it. Pro.

Open Converter and drop files, or a whole folder, anywhere in the window, or choose Add files. Each is known by its contents, not its name, and set to the format it is most often wanted in; change it in the row’s list, or choose several rows and set them together on the right, where each format’s options are (quality, size, pages, bitrate and the like). Use for every… remembers the choice for that kind of file. Edit, Presets sets everything a preset fits at once, and Save the chosen as a preset keeps your own. Convert runs the queue a few at a time; each row shows its result against the original, and Show opens it beside it. Save gives one file, or all of them as one zip; in Chrome and Edge, File, Save into a folder writes each result as it is made, and File, Watch a folder converts what arrives in one folder into another while the tab is open. Several pictures, documents, tables or recordings can be made into one file (Make one… of all, on the right). Help, What converts to what lists every conversion. Nothing is kept once the tab is closed but your choices. Pro.

Open Authorship and start writing, start a drawing, or begin from a brief a teacher gave you. Everything you do is recorded as you do it; Record turns on timestamps and says exactly what they send; Share makes an .oauthor bundle. Whoever you give it to checks it free at /verify-authorship, which also opens an example. Pro, and the check is free.

While writing: Outline lists the headings with the words under each; View sets the type, the colours, the spelling check, focus and typewriter scrolling, and the text’s language and direction, right to left included; Statistics counts the text; Export writes Word, PDF, Markdown or text with the record beside it. A drawing has layers and a stroke eraser. A teacher issues a brief from a template, with a rubric if they like; on the checking page anybody can compare two points of a record, and a class’s records chosen together are one table that sorts, sets out facts to look at and downloads as CSV. Records of code from Umbra are checked on the same page: replayed file by file, with every run and how it ended.

On a request, Add an email file (or drop one on it) reads an .eml or Outlook .msg reply on the device: its text is read like a pasted reply, its Date dates the entry, and the email is kept as it came. On Requests, Match replies from a mailbox reads a later export of your mailbox and offers each message from an organisation you wrote to as that request’s reply. Re-listing, Look yourself up, opens each people-search site on its own search, one after another, for you to record Listed, Not listed or Could not tell. Screenshots of a listing (Add before, Add after) are hashed with SHA-256 and dated the moment they come in, and go side by side into the case file. Under the GDPR a request and its chaser can be written in French, German, Spanish, Italian, Dutch or Portuguese, citing the same articles; these are fixed templates not yet checked by a native speaker, and say so. Deadlines skip public holidays where the law moves them: choose the place on each request. The calendar file’s alarms leave out organisations’ names unless you chose to show them.

Open Umbra and open a folder on your computer (Chrome, Edge or Opera), start a project in the browser, import a zip, or try the sample. Run (F5) runs JavaScript, TypeScript or Python in a sandbox walled off from the site; Preview shows a web page as you write it; Format uses Prettier; Source control commits to the folder’s own git repository, a whole file or a single change at a time. Ctrl Shift P lists every command; Keyboard shortcuts changes any key; the line under the console runs JavaScript and Umbra’s own commands (type help). Every save is kept in Local history, and unsaved changes come back when the project is opened again. TypeScript’s language service, a debugger and a test explorer are described below. To hand in how the code was written, choose Record how this was written in the project’s menu, and later Save the authorship record: the .oauthor file is checked free at /verify-authorship. Pro.

In a TypeScript or JavaScript file Umbra runs TypeScript 6.0.3’s own compiler in a worker of its own, fetched from this site the first time such a file is open (11.6 MB, kept by the browser). Type errors are underlined as you type and listed under Problems; completion offers what a type has, and a name from another file with its import written; the pointer over a name shows its type and documentation, and typing a call shows its parameters. F12 goes to a definition, Ctrl F12 to an implementation, Shift F12 lists the references, and F2 renames a symbol in every file that uses it (in place, when it is in one file). Ctrl . offers TypeScript’s fixes for the problem at the cursor and its refactors for a selection; Shift Alt O organises the imports. A count of references sits above each function and class; type hints written into the code, and the service itself, are in Settings. A project’s tsconfig.json or jsconfig.json is read; a file over 1 MB is checked for syntax only. Nothing is sent anywhere.

Press in the margin beside a line, or F9, to set a breakpoint in a JavaScript, TypeScript or Python file; Run (F5) then stops there, in Run and debug (Ctrl Shift D). A web page cannot pause a program in place, so Umbra records the run as it goes (JavaScript and TypeScript instrumented before they run, Python traced with sys.settrace) up to 20,000 steps, and you step through the recording: F5 to the breakpoint’s next time, F10 over, F11 into, Shift F11 out, Alt F10 back a step, Shift Alt F5 back to the breakpoint’s last time, Ctrl F10 to the cursor, or along the slider. The variables, the call stack and the console are as they were at that step. A watch expression added is recorded by running the program again. A variable cannot be changed while paused. Testing lists the project’s tests (for node:test) by file and suite: run one, a suite, all, or the ones that failed, and each is marked beside its line. A pure-Python wheel (a file ending -none-any.whl) kept in the project is installed before each Python run; pip list in the console says what Python has.

An .ipynb opens as a notebook: Shift Enter runs a cell, Run all starts afresh, Save writes the outputs back for Jupyter. A .sql file runs on SQLite; put -- database: data/app.sqlite on its first line to run it on a database in the project, and keep the database if the statements change it. When a Python script calls input() and the Input box has no line left, it asks in the console (in Chrome and Edge); after a run, the files it wrote are listed with a button to keep them. In Firefox and Safari, Copy a folder in brings a folder’s files into a project kept in the browser. In Source control: Blame shows who last changed each line (the status line shows it for the line you are on), Stash the changes puts them aside under refs/stash, and Merge a branch merges another branch, with an editor for each conflict.

An extension is a .js file, or a folder with umbra-extension.json and its main file, installed from your own disk in the Extensions panel; it is kept in this browser. Each runs in a worker of its own in a sandbox with no network: it cannot fetch, open a socket, load a script from an address, or read this site’s storage. It reaches Umbra through one object, umbra: commands.register(id, title, run, { keys }), editor.replaceSelections, replaceRange, setText and insert while one of its commands runs, window.say and notice, snippets.add(language, list), formatters.register(language, fn), linters.register(language, fn) and themes.register(theme). Write a new extension (in the panel) puts a file with every part of this in the project; Install the open file as an extension starts it, and each save starts it again.

Open Books and start a company or open a .obooks file. Bank imports a statement (CSV, OFX, QFX or QIF) and explains each line to an account, an invoice or a bill; a rule explains the regular ones. Sales and Purchases hold invoices, quotes, credit notes and bills, each with its PDF. VAT works the nine boxes out for a quarter, each box opening on its lines; it does not submit them to HMRC, which needs bridging software or the HMRC website. Reports covers any period against the one before, as PDF or CSV. A company’s Directors place keeps each director’s loan account, works out section 455 at a year end, and declares dividends out of the reserves, with the board minutes and a voucher for each shareholder. Payroll posts each month’s figures from your payroll software as one journal and shows what is owed to HMRC by tax month; with the Construction Industry Scheme turned on there, a subcontractor’s bills take the deduction off the labour as they are paid, and the monthly return’s figures and the statements are made for you. Projects sets each job’s income and costs against its budget; up to two tracking categories of your own split the profit and loss. Find and recode moves many lines to another account, VAT code or project at once, and Cash forecast shows the next thirteen weeks. Save the company as a .obooks file from File (Ctrl S); press ? for the other keys.

Open Roots and start a tree, or open a GEDCOM, GEDZIP or Gramps file from another program. The views are along the top: pedigree, descendants, hourglass, fan, family group, the person’s page, timeline and relationship; Gnosis finds impossible dates and people entered twice; Charts, Book and Share make posters, a book and files to share with living people kept private. Pro.

A source can follow a template (census, parish register, certificate, will, newspaper, website and others), and is then cited as Evidence Explained sets it. Places finds a place written several ways and makes it one, and puts places on a map drawn on your device. DNA takes match lists or matches typed in, with their shared matches, and gathers them into clusters. Book also makes the ancestors of one person in Ahnentafel order, a family group sheet, a timeline and a relationship. Tools, Plug-ins runs reports, charts and importers written by others, each in a sealed worker with no network: a plug-in is a .orootsplugin file whose code calls rootsPlugin({ run(input, roots) }) and gives back { title, html }, { title, svg } or, for an importer, { people, families }. The three examples there save as files to read.

Person, Enter a census household types a census page in once: choose the census, the address and the reference, check each row (people already in the tree are found and offered), and every person gets their census fact, the head’s holding the household in their roles. Any fact can have others at it, each in a role, from its dialog: a witness, a godparent, an informant. Tags (Person, Tags on the person; Tools, Tags) mark people, families and sources with a colour shown on the charts; in People, A filter of your own combines rules and keeps them by name, and Share these people saves just those as a file. Relationship lists every path between two people under Every path. DNA’s Chromosomes tab reads segment files from FamilyTreeDNA, MyHeritage, GEDmatch or 23andMe; Triangulation lists the matches that overlap and whether their shared matches support it; The odds weighs where somebody of unknown place fits, in the manner of What Are The Odds?, against the Shared cM Project’s ranges.

Open Gnosis and open an SPSS .sav, CSV or Excel file, or a survey with open answers. Analyse runs the tests with APA tables and a sentence to report; Transform computes, recodes and selects cases; everything run is written as syntax that can be run again. Sources holds transcripts and open answers: select text and press C to code it. Queries searches, counts words, crosses codes with attributes and measures agreement between two coders. Pro.

A systematic review starts from New review. Search writes the search for each database from your concepts, and runs it in PubMed, Europe PMC or OpenAlex from this browser when you press Search (run again later, it brings only what is new); Import results takes the files any other database exported (RIS, MEDLINE, BibTeX, EndNote XML, Web of Science text or CSV). Duplicates are found as they come in; Records, To check shows the pairs to call one paper or two. Screen shows one record at a time: I includes, M is maybe, E excludes, Z undoes; at the full text, E asks the reason, or 1 to 9 gives it. The Screen, Studies and Risk of bias tabs show how much is left in each. Review, Attach full texts matches a folder of PDFs to their papers, and Find free full texts asks OpenAlex, by DOI, where the rest can be read free; a PDF opens beside the work on it. Studies is the extraction form; Risk of bias appraises with RoB 2, ROBINS-I, QUADAS-2, ROBIS, Newcastle-Ottawa, the MMAT or a checklist of your own; Meta-analysis pools each outcome, with forest and funnel plots, meta-regression and GRADE, and pools diagnostic accuracy by the bivariate model with its summary ROC plot. Review, The review, drafted writes the methods and results from the project, with the PRISMA 2020 checklist.

Two reviewers each screen under their own name, blind to the other. Review, Work together brings their decisions together through a folder both have (one OneDrive, Dropbox, Google Drive or iCloud Drive keeps in step): each copy is written there as it changes, and the other’s is read every minute; it needs Chrome or Edge on a computer. Elsewhere, each saves a copy and the other brings it in with Review, Merge a reviewer’s copy. Conflicts are resolved in Screen, and Review, Agreement gives Cohen’s kappa.

How the numbers are checked: Gnosis’s tests hold the meta-analysis to R’s metafor and statsmodels (pooling, heterogeneity, meta-regression, trim and fill, the rank test and the bivariate model of diagnostic accuracy), the tests and models to SciPy and statsmodels, and the .sav and .dta files to pyreadstat, on fixed data sets.

Transform, Weight cases counts each case by a frequency variable, as SPSS’s WEIGHT BY; a .sav file’s weight is applied when it opens, and the status bar says so. Transform, Multiple imputation fills each missing value several times by chained equations; from then on, every analysis of those variables that can be pooled (t-tests, correlations, linear, logistic and generalised linear regression, mixed models) adds a table pooled by Rubin’s rules under its usual output, until the data change. For repeated measures, Transform, Restructure turns one row per person into one row per measurement, which Analyse, Linear mixed model needs.

Open Write and start a novel or a screenplay, open a .owrite project, or import Word, Markdown, text, Fountain, Final Draft or a Scrivener project. The binder is on the left and the inspector on the right; Corkboard, Outline, Timeline, Bible, Targets and Submissions are along the top. Compile makes standard manuscript format in Word and PDF, an EPUB, or the screenplay as PDF, Final Draft and Fountain. Pro.

Keywords are typed into the inspector and shown on the cards and in the outline; Collections, beside the binder, gathers documents by hand or as a saved search (Find, Save as a collection). The project menu’s Bring back a Word file an editor returned puts their tracked changes and comments into the scenes, to accept or reject in the inspector’s Review tab. Spelling (F7) checks in British or American English, set in Project settings, with Add to the project’s dictionary. In a script, Alternates keeps other versions of a line, Tag marks breakdown elements for the breakdown sheets in Reports, and Plotlines lays scenes against the story’s threads.

3D parts opens on an example mounting plate: add features from the toolbar and change any dimension in the History. File, Make drawing puts a part’s views on a sheet in Foundry, the suite’s 2D drawings. Inspect, Stress analysis holds a body by chosen faces, loads others and works out its stress, safety factor and deflection on this computer; Inspect, Shape optimisation then finds the stiffest layout of a share of its material and adds it to the part. File, Plug-ins runs part generators, reports and exporters in a sandbox that can reach nothing. Export writes STL, 3MF, OBJ, glTF, USDZ and a faceted STEP; with Kernel set to Exact, it also writes STEP and IGES with their true surfaces, and BREP, OpenCascade’s own file, for FreeCAD. With the view chosen, the arrows turn it, Shift and the arrows move it, and + and - zoom; Tab steps through what a click would pick, Enter chooses it and Ctrl Enter adds it. Help, Take the tour, shows where things are. Pro.

With Kernel set to Exact: a fillet can vary from one radius to another along its edges, round every edge between two sets of faces, make a full round over a wall, or take its radius at points along an edge (per cent along, radius; …); Push/pull moves flat faces of any body, a STEP file you imported among them; Delete face takes away a hole, a pocket, a slot or a boss and closes the gap, and Move face moves one by a distance, on any body, imported STEP files too. A face whose gap would need the faces around it extended, such as a fillet’s, is refused: the OpenCascade build used here lacks that part. Surfaces, extruded, revolved, lofted or patched, are trimmed, knitted, thickened and offset, and assemblies are built with true surfaces.

Configurations, in the Variables panel, can leave features out and give a feature’s fields values of their own, and Export all writes each one. File, Derive from a part brings another part’s bodies into this one and keeps them up to date; in an assembly, Insert a part, Body by body puts a part of several bodies in as a component for each. Assembly, Project edges into a part writes one component’s outline, or its section, into a sketch of another component’s part, where they sit; the Assembly panel lists each reference with Update and Break. A sheet metal flat pattern takes holes cut across a bend, unbent along the bend’s neutral axis.

Foundry drafts, lays drawings out on sheets and prints them to scale, with DXF in and out and G-code for a laser or router. Type a command, such as L for a line, or pick a tool; object snaps catch ends, middles, centres and crossings as the pointer passes. A sheet made from a part in the 3D parts says when the part has changed since, and Update views draws it again. XATTACH shows another DXF or Foundry drawing in this one and XREF reloads, binds or detaches it. Tools, Plug-ins (or APPLOAD) runs plug-ins in a sandbox that can reach nothing. Help, Take the tour, shows where things are. Pro.

BEDIT opens a block for editing, where BPARAMETER gives it a stretch, a flip or visibility states (BVSTATE) that each insert can change; QDIM dimensions everything chosen at once. ANNOTATIVE makes text and dimensions keep their size on the paper, ANNOSCALE sets the model’s annotation scale, OBJECTSCALE the scales each supports, and ANNOALLVISIBLE whether a viewport shows the rest. Print takes a plot style table, by colour (.ctb) or named (.stb, with PLOTSTYLE or a layer’s style), one of Foundry’s or read from a file, and saves one as a file. Isometric drafting, WIPEOUT and multilines (MLINE, MLSTYLE and MLEDIT) are there too.

Open Case and start a case, open a case file, or load the sample. Load takes email, Outlook files, PDFs, Office files and pictures, loose or zipped, for a custodian; Review searches them and codes them with keys 1 to 9; Review also redacts, with boxes on a PDF or a picture or passages of text; Produce numbers the documents with Bates numbers and saves the pages, text, natives and load files (DAT and OPT) with a privilege log; Chronology, People and Exhibits build a chronology, a map of who wrote to whom and exhibit bundles; Audit shows the trail of everything done, chained by SHA-256; Share hands a case or a review set to another reviewer and merges their coding back. Kept in this browser. Pro.

Analytics ranks what is not coded by how likely it is to be Responsive (or any tag you choose), from the documents coded each way, and can rank again as you code; Review’s order Likeliest responsive first follows it, re-ranking below the document on screen. It shows the ranking’s precision, recall and AUC by five-fold cross-validation, and the documents found in the order they were coded. Draw an elusion sample of the documents not coded on Batches and answer it, and Analytics estimates recall from it, with its interval; Save the stopping report writes the figures and the method. The ranking is logistic regression on TF-IDF vectors of the documents’ words, trained on the coded documents and up to 100 others presumed against (Cormack and Grossman’s baseline model implementation); recall is R / (R + eN), R the documents coded responsive, N those not coded and e the share of the sample found responsive, its interval from e’s Wilson interval. Clusters (spherical k-means on a 100-dimension latent semantic analysis of the same vectors) are named by their commonest words and searched as cluster:3; More like this, on Review, finds documents near one, or near the words selected in it, in that space; Related words offers words used in the company of the search’s; Categories suggests the documents not coded to the tags you choose, from the documents coded with them, each accepted by you, and Undo takes it back. Each document’s language comes from its commonest words and its alphabet, searched as lang:fr. Search also takes recieve~ (within one letter) and /regular expressions/, run over the text with a time limit. Highlighting marks sets of words, each in its colour, in every document. A PDF or zip with a password asks for it on Review; it is kept in the tab’s memory, never saved. Overview sets the case’s time zone, in which Review shows times with the UTC time beside them. All of it runs in the browser tab.

Desk, Record, Standard and Trace hold single tools for particular jobs: letters and rotas, evidence and deadlines, lifting and loading, logs and artefacts. Each is free to open and to check a file with; saving the result is Pro.