Zero-knowledge IT documentation
"Zero-knowledge" in SaaS means the provider cannot read your content. That matters when your notes describe architecture, AI prompts you've engineered, or credential workflows you want protected at rest on someone else's infrastructure.
What ConfigTrail does differently
You choose an encryption passphrase in the client. Keys are derived there with PBKDF2 (600,000 iterations); plaintext procedures are encrypted with AES-256-GCM before upload. We operate the sync, auth, and collaboration layer — not the ability to read your vault.
When this model fits
Production runbooks, infrastructure configs, security procedures, MSP client documentation, and proprietary AI prompts — anything where a plaintext copy on a vendor's server is a real risk.
Practical features on top of encryption
Encrypted full-text search, version history with diffs, typed runbook steps, tags, team sharing via per-member ECDH keys, and export to Markdown or PDF.
Start 30-day free trial · How the vault works
ConfigTrail requires JavaScript to use the application. Start your free trial at configtrail.com.