# TEPHIA SECURE

> Exchange files with clients, end-to-end encrypted, with a signed proof of delivery. Contractual confidentiality obligations under § 62a StBerG, § 43e BRAO and § 26a BNotO. Try it for 14 days, no payment method needed.

TEPHIA SECURE is a service of bitnacs GmbH (Wiesbaden, Germany), developed and operated in Germany. Files are encrypted in the browser before they leave the computer; the provider cannot read the contents. Recipients download files with a link and a password, without an account. Every transfer ends with a digitally signed proof of delivery (PDF/A) with a timestamp from an independent authority, publicly verifiable.

## How a transfer works

- **Choose the file:** Encryption takes place in your browser, before anything leaves your computer. The password is generated there too, not on the server.
- **Send link and password separately:** Two prepared emails. Anyone who intercepts just one gets nothing. We can also send the link for you. The password always stays with you.
- **Proof of delivery, ready to file:** Every download recorded with date and time, IP address and location – plus the checksum of every file. Proves which document arrived. As a signed PDF/A with a timestamp from an independent authority.

## What it is built for

- **We cannot read the contents:** Files are stored on the server in encrypted form only. We never have the key.
- **Tamper-evident proofs:** With a checksum of every file, confirmed by the recipient. Any change is detected.
- **For other parties too, without an account:** Clients upload files to your upload box via a link, without registration.
- **Sign-in on your terms:** Microsoft Entra ID, a password with a second factor, or a FIDO2 security key.
- **Straight from Outlook:** Send securely and request documents without leaving Outlook.

## Example

- [Example proof of delivery (PDF)](https://tephia.com/demo/zustellnachweis.en.pdf): a real transfer of three sample files as a ZIP to a demo recipient, with the checksum of every file, confirmed by the recipient.
- [Verify this proof of delivery online](https://tephia.com/verify?reference=33500194-4a7a-4293-8119-8b4d423bfa66&digest=f42d7eef0c0baef2d32eb3675a4e09d9ce4b6c1f83c5a8a899714cbe9492a9f1)
- [How secure is TEPHIA SECURE?](https://tephia.com/security?lang=en): encryption, what is stored on the server and what an attacker who took it over would get.

## Guide

- [User guide](https://tephia.com/help?lang=en): sending, requesting documents, proofs of delivery, the Outlook add-in, downloading as a recipient — with short videos.
- Video: [Send securely in the browser](https://tephia.com/help-video/send-web.en.mp4)
- Video: [Send securely from Outlook](https://tephia.com/help-video/send-outlook.en.mp4)
- Video: [Link in the email, password separately](https://tephia.com/help-video/send-outlook-link.en.mp4)
- Video: [Request, upload and download documents](https://tephia.com/help-video/request-outlook.en.mp4)
- Video: [How recipients download files](https://tephia.com/help-video/pickup.en.mp4)

## How your proofs are secured

Every proof is digitally signed and carries a timestamp. How far PDF software trusts it automatically depends on who issued the certificate.

- **Signature with our certificate (In every plan):** Any later change to the PDF invalidates the signature. A timestamp from an independent authority shows when the proof was created. Hash chain and daily chain seal: no entry can be changed, removed or inserted without detection. Verifiable online without an account: via the QR code on the proof or at tephia.com/verify. Adobe Reader shows “validity unknown”. This does not mean anything is wrong; it simply means our certificate is not on the EU trust list that Reader recognises. You can check integrity online or using the certificate fingerprint.
- **Qualified electronic seal (Add-on · coming soon):** Sealed by a qualified trust service provider under the eIDAS Regulation. Adobe Reader and other PDF software show the seal as valid without further checks. Legal presumption that the proof is unaltered and originates from bitnacs GmbH as the operator (Art. 35(2) eIDAS). Hash chain, timestamp and online verification remain unchanged. Available with every plan once released. Useful if your proofs regularly go to courts, authorities or the other party.

## For professions bound by professional secrecy

Under German professional law, anyone bound by professional secrecy who engages a service provider needs a contract in text form: a duty of confidentiality, a notice of criminal liability, and access only as far as necessary. All of this is part of our data processing agreement — for every profession named in § 203 StGB (German Criminal Code).

- [Tax advisers](https://tephia.com/steuerberater?lang=en): Exchange annual accounts, tax returns and payroll documents with clients using end-to-end encryption. Contractual confidentiality obligation under § 62a StBerG, proof of delivery as a signed PDF.
- [Lawyers](https://tephia.com/rechtsanwaelte?lang=en): Send pleadings, contracts and evidence to clients and the other party using end-to-end encryption. Contractual confidentiality obligation under § 43e BRAO, state of the art under § 2 BORA, proof of delivery as a signed PDF.
- [Notaries](https://tephia.com/notare?lang=en): Exchange drafts and documents with parties using end-to-end encryption. Contractual confidentiality obligation under § 26a BNotO, proof of delivery as a signed PDF.
- [Auditors](https://tephia.com/wirtschaftspruefer?lang=en): Exchange audit documents with clients using end-to-end encryption. Contractual confidentiality obligation under § 50a WPO, proof of delivery as a signed PDF.
- [Patent attorneys](https://tephia.com/patentanwaelte?lang=en): Exchange invention disclosures and application documents using end-to-end encryption. Contractual confidentiality obligation under § 39c PAO, proof of delivery as a signed PDF.
- [Doctors](https://tephia.com/aerzte?lang=en): Send medical reports and documents to patients using end-to-end encryption. Contractual confidentiality obligation under § 203 Abs. 4 StGB, safeguards under § 10 Abs. 5 MBO-Ä.

## Countries

Offered to organisations in: Germany, Austria, Liechtenstein, Luxembourg, Ireland, Malta, Belgium, Italy, Finland, Denmark, Cyprus, Portugal, Czechia, Slovenia, Poland, United Kingdom, France, Netherlands, Spain, Hungary, Romania, Greece, Lithuania, Latvia, Iceland. Further EU countries are in preparation.

## Languages

The interface, the guide, emails to recipients and the proofs of delivery are available in 19 languages: [Deutsch](https://tephia.com/), [English](https://tephia.com/?lang=en), [Čeština](https://tephia.com/?lang=cs), [Dansk](https://tephia.com/?lang=da), [Ελληνικά](https://tephia.com/?lang=el), [Español](https://tephia.com/?lang=es), [Suomi](https://tephia.com/?lang=fi), [Français](https://tephia.com/?lang=fr), [Magyar](https://tephia.com/?lang=hu), [Íslenska](https://tephia.com/?lang=is), [Italiano](https://tephia.com/?lang=it), [Lietuvių](https://tephia.com/?lang=lt), [Latviešu](https://tephia.com/?lang=lv), [Nederlands](https://tephia.com/?lang=nl), [Polski](https://tephia.com/?lang=pl), [Português](https://tephia.com/?lang=pt), [Română](https://tephia.com/?lang=ro), [Slovenščina](https://tephia.com/?lang=sl), [Svenska](https://tephia.com/?lang=sv).

The German versions of the terms, the data processing agreement and the privacy policy are binding.

## Prices

Net prices plus VAT, cancellable monthly or paid yearly at a discount.

- **Starter**: €39.00 per month or €390.00 per year · up to 5 users · up to 500 MB per transfer
- **Team**: €119.00 per month or €1,190.00 per year · up to 20 users · up to 1 GB per transfer
- **Business**: €299.00 per month or €2,990.00 per year · up to 50 users · up to 2 GB per transfer

United Kingdom: prices in GBP

- **Starter**: £35.00 per month or £350.00 per year · up to 5 users · up to 500 MB per transfer
- **Team**: £99.00 per month or £990.00 per year · up to 20 users · up to 1 GB per transfer
- **Business**: £249.00 per month or £2,490.00 per year · up to 50 users · up to 2 GB per transfer

In every plan: Outlook add-in: send securely and request documents, right from Outlook (Outlook 2021 and later, Microsoft 365 and Outlook on the web – with Exchange Online and Exchange Server (on-premises)). Coming soon: integration with practice management software, ERP and CRM systems.

Coming soon as an add-on to every plan: Qualified electronic seal on the proofs of delivery (see “How your proofs are secured”).

More than 50 users or a dedicated instance: quote on request.

Try it free for 14 days, no payment method needed: https://tephia.com/?lang=en#registrieren

Are you an IT client of bitnacs GmbH? From the Business package upwards, TEPHIA SECURE is included free of charge, set-up included. More at bitnacs (in German): https://bitnacs.de/tephia-secure

## Legal

- [Terms](https://tephia.com/terms)
- [Privacy](https://tephia.com/privacy)
- [Legal notice](https://tephia.com/imprint)

## This file in other languages

- Deutsch: [llms.txt](https://tephia.com/llms.de.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.de.txt)
- English: [llms.txt](https://tephia.com/llms.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.txt)
- Čeština: [llms.txt](https://tephia.com/llms.cs.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.cs.txt)
- Dansk: [llms.txt](https://tephia.com/llms.da.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.da.txt)
- Ελληνικά: [llms.txt](https://tephia.com/llms.el.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.el.txt)
- Español: [llms.txt](https://tephia.com/llms.es.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.es.txt)
- Suomi: [llms.txt](https://tephia.com/llms.fi.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.fi.txt)
- Français: [llms.txt](https://tephia.com/llms.fr.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.fr.txt)
- Magyar: [llms.txt](https://tephia.com/llms.hu.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.hu.txt)
- Íslenska: [llms.txt](https://tephia.com/llms.is.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.is.txt)
- Italiano: [llms.txt](https://tephia.com/llms.it.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.it.txt)
- Lietuvių: [llms.txt](https://tephia.com/llms.lt.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.lt.txt)
- Latviešu: [llms.txt](https://tephia.com/llms.lv.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.lv.txt)
- Nederlands: [llms.txt](https://tephia.com/llms.nl.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.nl.txt)
- Polski: [llms.txt](https://tephia.com/llms.pl.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.pl.txt)
- Português: [llms.txt](https://tephia.com/llms.pt.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.pt.txt)
- Română: [llms.txt](https://tephia.com/llms.ro.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.ro.txt)
- Slovenščina: [llms.txt](https://tephia.com/llms.sl.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.sl.txt)
- Svenska: [llms.txt](https://tephia.com/llms.sv.txt) · [Full version with security, guide and professional law](https://tephia.com/llms-full.sv.txt)