Every tool on this site runs in your browser tab. Nothing you open is uploaded, there is no account, the Workspace is free, and every other tool is free to check a file with. Everything else worth knowing is below.
Questions, bugs or ideas? Join the OBSCURA OS Discord, or use the support page, which writes the email to Hello@ObscuraOS.com for you. If your work has gone missing, start with what to do when work disappears. Whether the site is up is on status, and exactly what the server sees is on trust.
Open the photo in CLOAK. It shows what the file carries (the place it was taken, the camera’s serial number, the times) before anything is changed, and writes a copy without them. Checking is free; saving the cleaned copy is Pro.
SEAL removes the text under each box rather than drawing over it, so nobody can select or copy it back out. A box drawn in an ordinary PDF editor usually leaves the words underneath: why that happens.
Docs opens .docx, Sheets opens .xlsx and .csv, and Slides opens .pptx, all free, in the tab, with no account. Each saves back to the same format. PDF opens, fills, signs and edits a PDF.
X-RAY finds what a file is hiding: who really wrote it, text deleted under tracked changes, PDF redactions that failed, and the place in a photo. Or drop it on the Workbench to see every tool that can act on it.
SCRUB takes the author, editing time, comments and deleted tracked changes out of a Word, Excel, PowerPoint or PDF file; DOCSCRUB does the same for a Word file in more detail. CLEANROOM strips metadata, macros, tracking beacons and zero-width characters in one pass. Checking is free; saving the clean copy is Pro.
STAPLE merges, splits, reorders and rotates PDF pages and stamps page numbers on them, on your device. For a numbered bundle with an index, see BUNDLE.
Press Ctrl K (Cmd K on a Mac) on any page and type what you want done in your own words. Where to start lists the tools by the situation you are in, and the Workbench starts from the file.
The Workspace is free for everyone: Docs, Sheets, Slides, Notes, Calendar, Tasks, Contacts, Plan, Drive, Today and the PDF editor. Every other tool is free to open and to check a file with; saving the result is Pro. The Sovereign Suite, the Photo Editor, the Engineering Suite (3D parts and Foundry’s 2D drawings), PDF Studio and Case are Pro throughout.
Pro is $9 a month or $79 a year, for one person, and covers everything. Any one application on its own is $4 a month or $35 a year; two cost $8 a month, and from three Pro is the better buy. Plans for a team or a business are not offered at the moment, so each person needs a plan of their own. Prices are in US dollars. Compare the plans.
Saving from one free tool for 24 hours is $2, paid once, with nothing to renew or cancel. It is bought from that tool’s save and covers that tool alone. The day and week passes that gave everything in Pro, and the gift passes, are no longer sold; one bought earlier runs to the end of its time as before.
Every plan starts with 7 days free. Stripe asks for the card at the start and charges nothing until the free days are over. Cancel before then and you pay nothing.
Use Stripe’s billing page, linked from Pro, with the email you paid with. Cancelling stops the next renewal, and Pro stays on until the end of what you paid for. Your files are not affected: they were always on your own device.
Some banks ask the card holder to confirm a charge (3-D Secure), and a card can be declined. Either way the payment has not gone through, and Stripe tries again for a while before it ends the subscription. Pro stays on meanwhile. When you next use Pro online (it asks once a day), the Pro menu, Pro and the lock screens say “Your bank needs you to confirm the payment”, with a button to Stripe’s page for the invoice. Open it to confirm the payment with your bank, or pay with another card. If the subscription ends before it is paid, the browser says so and offers a plan to start again; nothing on your device is deleted. To change the card for later payments, use Stripe’s billing page, linked from Pro.
Write to Hello@ObscuraOS.com from the address you paid with, within 14 days of a charge, and that charge is refunded in full: first payment or renewal, a day with one tool or a subscription. The refund policy has the rest.
There is no account and no password. When checkout finishes, the Pro page makes your key: a signed line of text saying your plan and the date it runs to, kept in that browser and checked on the device, so Pro works offline. Copy or download it from Pro; on another device, press Sign in at the top of any page and paste it there. Once Pro is on, a Pro button with a tick takes Sign in’s place: it shows your plan and the date it runs to, copies your key for another device, and signs this device out, which takes the key off this browser and nothing else. A subscription’s key renews itself when Pro is used online in the five days before it runs out, and once a day it asks whether a payment needs you. The Pro menu also says when a free trial ends and what is charged after it. Lost it? Write from the address you paid with and we send it again.
Team and Business are not offered at the moment, but a team or business that already has one keeps it. Whoever holds the key the subscription came with manages the seats at /seats: add a person by name and email address, or many from a CSV file, and each gets a one-time link to their own key. Removing somebody stops their key within about two minutes wherever they are online; a device kept offline keeps working until its key runs out, 35 days at most. A team that shares one key can go on doing so.
Where invitations are switched on, a subscriber’s link from Pro gives a friend 25% off their first payment, and takes a month of the subscriber’s plan off their next bill once the friend has paid.
In this browser, on this device, and nowhere else. There is no copy on a server. Work made in one browser is not in another, and a private window keeps nothing once it is closed.
Choose a folder in Settings and the Workspace also writes ordinary files into it: documents and notes as Markdown, spreadsheets as CSV, the calendar as an .ics. Browsers that allow it are Chrome and Edge on a computer.
Books, Case, Research, Roots, Sound and Vector each have Keep a copy in a folder: the open project is written into a folder you choose, as its own file, a few seconds after each change (Case and Sound, whose files are large, at most every few minutes). Write, Practice, Keep and the Photo Editor have folders of their own. A paid application that has saved nothing to a file for a week offers once to save a copy.
Settings, Privacy and data, downloads everything the apps keep in this browser as one .json file, or as an encrypted .obscura bundle with a passphrase you choose. Restoring puts it back on this device or another, and keeps whatever is already there.
The site keeps a copy of itself in the browser, so the Workspace opens with no connection, and any other page once it has been opened. Pro code is kept after its first visit, so the Pro applications keep working offline. Settings, Available offline, shows what is on this device and fetches the rest.
Settings, Sealed, cuts the site off from the network while you work, and the quick settings on the desktop have the same switch. While it is on, the site’s service worker answers every request from what is on this device or refuses it, the server included, so the page count and every optional check stop; and every page and worker it hands back carries a second policy, connect-src 'self' blob: data:, which your browser enforces and the page cannot remove. A paid application whose code is kept on the device goes on working, until the end of the paid period its key was sent under. Make everything available offline first: anything not on the device will not open until the seal is lifted. Test the seal tries three requests and shows each refused.
What it cannot do: a page already open, or loaded with a hard reload past the service worker, carries no seal until it is opened again. WebRTC, the one way a page can connect that the policy does not cover in Chromium, is taken away from sealed pages by the site’s own script, and VAULT will not start a transfer; code in another frame could still reach it. The browser’s own check for a new version of the site (a request for its service worker) is made by the browser and is not stopped, and no new version is installed while sealed. Checked in Chromium; Firefox and Safari have not been tested. Leaving asks first, and the time you left is recorded.
Every paid application has Receipt in its Help menu (in File in Foundry, and in the session panel in the Sovereign Suite), and in Find a command. It saves a file listing each file opened and saved since the page opened, with its SHA-256; every request the page saw and every request the site’s service worker saw, including those made by workers the page started; the policy in force; the periods spent sealed; and the release the code came from. It is signed with a key this browser made and cannot export, the one Authorship uses, and can be timestamped: only its 32-byte fingerprint is sent, through this site, to a public time-stamping authority. Anybody can check one, free, on Verify.
It is this browser’s own account. The signature shows the receipt was not changed after it was made; it cannot show what a modified browser, an extension or anything with more power than the page did, nor requests the browser makes for itself, those made before the service worker controlled the page, or peer-to-peer connections. Anyone can make a key, so a receipt is tied to your device only for someone who knows its fingerprint (Verify accepts one to compare), and to a time only by a timestamp.
Every file the site serves is listed with its SHA-256 in releases.json, and a GitHub Actions job signs that list with an Ed25519 key held in the repository’s Actions secrets, not on the host, Cloudflare. Settings, Pinned releases, Update only to signed releases, makes this browser hold the site to it. Turning it on reads the public key the site serves at that moment, checks the version you are running against a signature by it, checks every copy kept on this device against the list, and keeps the key, whose fingerprint it shows: compare it with the key on the trust page or in the repository. From then on the site’s service worker installs a new version only when its signature verifies with that key, the signed list names it and every file it fetches for this device has the SHA-256 the list gives; and a page, script, stylesheet, library or paid application’s code that arrives from the network is used and kept only if the list it runs under names it. If anything does not match, it stays on the version it has, which keeps working from what is on the device, and says so on every open page and in Settings. A new release is signed a few minutes after it is published, so a pinned browser takes it a few minutes later than others.
What it cannot protect against. The browser fetches the service worker’s own script itself, past any worker, so somebody who could change files on the host could replace the worker with one that does not check; the worker it replaces warns the pages open at that moment, and nothing more. The key is trusted as it was served when you turned this on. A signature says the files are the ones in the repository, so anybody who can commit to it, or who holds the signing key, has their change signed. It does not cover a hard reload, which goes past the worker; requests that ask for no caching; the libraries under /vendor/, which a server function fetches from npm and are not in the list; or a modified browser or an extension. A page is compared with the analytics script the host adds to every page taken out; if the host ever changes pages in another way, pinned browsers stay on the version they have until that is fixed. Clearing this site’s data turns it off. It needs a browser that checks Ed25519 signatures (Chrome and Edge 137, Firefox 129, Safari 17, and later); checked in Chromium only.
Install puts the site in its own window with its own icon, from the browser you already use; it is the same code from the same address, and it opens on the desktop. How to install it, browser by browser. Safari keeps an installed site’s storage, which it otherwise clears after seven days without a visit.
The desktop opens every application and tool in a window you can move, resize from any edge, snap to a half or a quarter of the screen, minimise and close, with a taskbar, a launcher that searches every tool, and Files over Drive and your folder. The windows you had open come back when you return. Ctrl K opens the launcher, Alt and the key above Tab switch windows (Control on a Mac), and ? lists the rest. It is free; a Pro application in a window still needs a key. On a phone it is a screen of applications, each opening full screen.
Settings, Privacy and data, Wipe removes every store, the offline copy and the site’s own worker from this browser. The folder on your disk is untouched. It cannot be undone, so take a backup first if you want one.
Try, in this order: the browser and device you made it on (Chrome’s work is not in Safari); your folder, if you chose one; a backup file from Settings; and, for a picture, the Photo Editor’s autosave, which the next visit offers back. We hold no copy, so there is none for us to restore.
A browser may delete a site’s storage when the device is short of space, and Safari deletes it after seven days of use without a visit to the site, unless it is installed. Clearing browsing data or a cleaning program deletes it too.
Ask the browser to keep this site’s storage (the button is on Support), choose a folder, take a backup now and then, and install the site as an app. Support shows whether this browser has agreed.
For now each person needs a plan of their own: a key is for one person, on every browser they use. Plans for a team or a business are not offered at the moment. A team or business that already has one keeps it, and whoever holds its key goes on adding people and taking them off at /seats. How a team uses OBSCURA OS.
For teams answers what a reviewer asks, and the CAIQ v4 is answered control by control, as a page and a CSV, beside the sub-processors, the incident response policy and the continuity statement. Trust says what the server sees, route by route, and how to check it yourself. There is no SSO, no SOC 2 report and no usage reporting, and the pages say so.
Today reads the other applications and lists the day: today’s events from Calendar, the cards due today and overdue in Tasks, the overdue invoices Books has handed over, the dates of the next fortnight and the documents you had open last. Each row opens the thing in its own application. Nothing is kept or sent anywhere: it is read again each time. Free.
Each application keeps its own work. The others read it where it is, on this device, and never change it. Contacts is the address book for all of them: Calendar’s guests, a card’s members in Tasks, a letter’s recipient in Docs, a customer in Books and a client in Practice can each be chosen from it, and somebody new added to it. Calendar can show the cards due in Tasks, birthdays and anniversaries, Plan’s milestones and the dates Books, Practice, Keep and Write hand over, each ticked on or off under My calendars. Ctrl K finds people, events, cards, notes and the words of documents as well as tools. Settings, under Privacy and data, turns the search of your work and the address book in other applications off. Keep and Practice are encrypted and hand over nothing unless you turn it on in their own settings, and then only a name, the kind of date and the day.
Open the Workspace and pick an application. Work is kept in this browser as you type, with no account. Choose a folder in Settings to have it written to disk as files too. Free for everyone, at home and at work.
Open the Sovereign Suite and drop a file on it: it lists every tool that can work on it. The first visit offers a short tour. Set up asks a few questions about your organisation and fills in the frameworks, policies and a first-90-days plan that fit, or opens a demonstration company to look around. Search everything (Ctrl K, or /) finds any tool, service or record. Pro.
In the Sovereign Suite, Frameworks and controls tracks twenty frameworks from one set of controls, among them SOC 2, ISO 27001, PCI DSS, NIST 800-53 (the Moderate baseline) and 800-171 Rev. 3, SOX IT general controls, the EU AI Act and Cyber Resilience Act, ISO 22301 and the Essential Eight. Each framework’s mapping to the controls is guidance, to check against its own text. To bring in one of your own, open Frameworks, choose Your own framework and import a CSV or JSON file with a reference and a title or text on each row; a controls column (IAM-07) or a maps column (soc2:CC6.1) maps it as it comes in, and the rest can be mapped by hand or from suggestions. Add your own control from the Controls tab; it can be mapped to any framework’s requirement and retired later. The Crosswalk tab, Between two frameworks, shows how far the controls of one reach into another and what is left to do. For a SOC 2 Type II period, set how often each control operates and the period coverage shows any interval with nothing recorded. In the risk register, a risk given FAIR’s ranges is put in money on the Quantified tab, and the board report shows the year’s expected loss of them all, the one-year-in-ten figure and the risks that carry most of it.
Connect your systems reads GitHub, GitLab (gitlab.com, with a token that has the read_api scope), Microsoft 365, Google Workspace and Okta from your browser. Each place read is due again after the interval you choose; when the service is opened, what is due and still connected in the tab is read again by itself, and the rest is named with what it needs. While the Suite stays open it can also read every connected system again every hour, four hours or day. Staff security records takes the staff list from BambooHR, Rippling, HiBob, Personio, Gusto or Workday, as CSV or JSON; the asset inventory takes CrowdStrike Falcon’s, SentinelOne’s or Defender for Endpoint’s device list and marks every device it does not list. In an incident, tick the Cyber Resilience Act’s clocks for an exploited vulnerability or a severe incident: 24 hours to the early warning, 72 to the notification, and the final report 14 days after a fix or a month after the notification.
Open the Photo Editor and open a picture (JPEG, PNG, WebP, HEIC, TIFF, camera raw, a Photoshop PSD), start from a size, or try the sample. The start screen offers a tour of four stops. File, Export As writes a copy without the place and the camera unless you say otherwise. A picture over 40 megapixels, a PSD, a TIFF or a project among them, opens scaled to fit, and the status line says by how much. Pro.
In the Library (File, Library), New copy makes a virtual copy of the photos picked: settings, rating and label of its own for the same photo, kept in the photo’s sidecar. Smart collection keeps rules (rating, flag, label, keyword, camera, lens, ISO, date, develop settings) and fills itself as photos change; Ctrl Z undoes a copy or a smart collection made or removed. Picks and collections are kept for each folder, not for its name, so two folders called the same keep their own.
Develop’s Lens section finds the lens from the photo and takes out its distortion, colour fringes and vignetting, from the lensfun database (CC BY-SA 3.0), served from this site. Transform’s Upright buttons straighten verticals and horizons from the lines in the picture, and Guided from two to four lines you draw on it; Effects has a vignette after the crop, in highlight priority, colour priority or paint overlay, and grain; Calibration turns the camera’s primaries. A Lightroom sidecar’s white balance in kelvin is measured from a raw file’s own as-shot reading, and saved back in kelvin. F, or Full window, gives Develop the whole window: the picture large, its histogram, and the sections beside it.
Open PDF Studio and open a PDF, or try the example. Edit changes the words already on the page, in the same font where it has the letters; when a paragraph grows, the text below it moves down, or its words flow on into the paragraphs after it and onto the next page, as the panel says. F7 checks the spelling. OCR makes a scan searchable, Forms finds and makes fields, Compare shows what changed between two versions, and Batch runs the same steps over many files. Pro.
Redact in PDF Studio takes the words, the pictures’ pixels and the parts of lines and shapes under each box out of the file, and a scan stays a scan with its recognised text. A gap the exact width of a word can give the word away, so Hide how long the words were is on unless you turn it off: each gap is given a width of its own, chosen at random between two and a half and four and a half times the size of the type, the rest of the line moves up to it, and the box drawn is that width. Neither the gap nor the box then follows the length of what was taken out. A box over a picture, a line or turned text keeps its own size, and the report after redacting says how many did.
In PDF Studio, Redact, Save and prove saves the file and reads the saved bytes again, separately from the code that redacted it, for every word the session redacted and any you add; Prove a saved PDF does the same for a file saved earlier. In Case, Produce, Prove the last production reads the production’s zip the same way, with the words its redactions took away. It looks in the text of every page of every revision (the file cut at each incremental update, as a reader of the earlier version would see it), invisible text included, so an OCR layer is read; every object and stream in the file, decompressed, whether the current file uses it or not; the document’s details and its XMP; form fields, bookmarks, annotations and attached files; and, for a production, the load files, the text files, the logs and every PDF and native in it. A word is matched in any case, through ligatures and soft hyphens, and split across pieces or lines. Asked to, it also reads the pictures with OCR, on this device.
If a word is found anywhere, there is no certificate, and the places are listed. If none is, it signs a certificate with this browser’s key (the one a receipt uses): the file’s SHA-256, every place it read and how many of each, whether OCR ran, whether the lengths of what was taken out were hidden, and for each word a salted hash rather than the word. Anybody can check it, free, on Verify: type a word you already know and it says whether that word was one of those looked for, and choose the file to hold it to the certificate and search it again yourself. A short word or a few figures could be found again from its hash by trying every possibility, so those hashes are left out unless you ask, and the certificate says how many were.
What it cannot show: anything outside the places it lists; words drawn as shapes, or in a font with no map back to letters, that no reader of text can see; the words in a picture when OCR was not run, and OCR can misread; an encrypted file, which it does not read (prove the copy saved without its password). It is this browser’s own account, like a receipt: the signature shows the certificate was not changed, not that the browser told the truth.
In PDF Studio, Check, PDF/A converts a file to PDF/A-1b, 2b, 2u or 3b: fonts embedded, an sRGB output intent, scripts taken out, XMP written. It then checks the file against the rules of ISO 19005 a program can decide, each named by its clause, and the file says it is PDF/A only if all of them pass. The check is not veraPDF and does not cover every rule veraPDF does; the report says which it leaves out. Tags edits the tag tree and the reading order, numbered on the page; PDF/UA checks the conditions of ISO 14289-1 a program can decide and lists those for a person. Neither check is a certificate of conformance.
Quick access (Ctrl Shift Space, or Q) opens a search box over any screen: Enter copies the password or the code, Ctrl Enter the username, Alt Enter the two-step code, and Shift Enter opens the item. Vaults, in Settings, group items inside one Keep; a hidden vault’s items, like an archived item’s (Archive on the item, or A), stay in the Keep and its copies and are left out of the lists, search, quick access, the dates and the health check until they are brought back.
When a recovery key is made, Split it among people prints a card for each trusted person; any number you choose of them, together, open the Keep from the lock screen (Use the recovery key, then Put it together from shares), and fewer give away nothing of the key. Health lists the logins on sites that take a passkey with none noted, from the passkeys directory that travels with Keep. Any item, a login, a note or a code as well as a document, can carry files. Pro.
Open Keep, make a Keep with a passphrase, and print the emergency kit with its recovery key, or try the demo. Add documents (or scan them with the camera: the page’s edges are found, and its words read on the device so a search finds it), records such as a passport, a policy or a warranty, logins and two-step codes; their dates appear under Dates, a passport’s nine months ahead. Health gives a score out of 100 and every login to fix, each with its fix. Sign in, on a login, copies the username, then the password, then the code, as you come back to the tab. Share sends one item as a file that stops opening after a time, or opens once, or moves it to your other device by QR code. Legacy writes a letter, a plan and a package for one person, which they open free at /keep-open, and a drill opens it as they would. Settings has travel mode, which leaves only what is marked safe for travel on the device until you bring the rest back from your backup. Sync saves the whole Keep as one encrypted file, or keeps it in a folder of your own. Pro.
Open Practice, start a practice with a passphrase, open a practice file, or try the demo firm. Clients and matters, the conflict check before a matter opens, timers and time in six-minute units, pre-bills, invoices and credit notes, statements of account, LEDES 1998B and 98BI files with UTBMS codes, client ledgers that cannot go below zero and the three-way reconciliation, the office account reconciled from a CSV, OFX or QIF statement, workflows whose steps move with a matter’s key dates, the diary and limitation dates, documents in folders with versions, templates with sections for some matters only, a precedent bank, threaded email, letters signed on the device (an electronic signature, not a qualified one), intake forms saved as one HTML file whose answers come back encrypted, and reports from realisation to lockup, all encrypted in the browser. Pro.
The Words tab of the inspector takes a transcript: the JSON SCRIBE saves with Time each word ticked, or an SRT, WebVTT or Whisper JSON file. Sound runs no speech model of its own. Choosing words selects the audio they were said in; Delete cuts them from every track and the words after move up, and Cut fillers takes out every um and uh in one step. Where a file times only each line, the words are placed by their length, and the tab says so. Save as SRT or WebVTT writes captions that follow the edit.
Add a label track from the project menu; B labels the playhead, or the selection across its length. Drag a label by its flag, double-click it to rename it, and use its track’s menu for Label sounds, labels to markers, and Audacity’s label files in and out. Split at silences, in Effects, cuts a clip between the sounds in it, and can take the silences out. A clip’s envelope (its menu, or Edit on the clip in the Clip tab) is volume that moves with the clip. The DeClipper, under Noise, draws again peaks that were cut flat. Presets, in the Effects tab, saves a chain to put on another track; Save the tracks as a template, in the project menu, offers them under Tracks when the next project starts.
Seal each recording as evidence, in the menu beside the tempo, hashes every second as it comes in, chains each hash to the one before, and signs the recording with this browser’s key when it stops. Sealed recordings, in the project menu, saves the recording with its record; anybody can check the two free at /verify, which shows from which second a changed recording differs. Pro.
Open Sound and start a project, open WAV, MP3, FLAC, AAC or Ogg files, record from the microphone, or try the sample podcast. Drag across a track to select, S splits at the playhead, Effects writes an effect into the selection: EQ, compressor, noise reduction, reverb, pitch, tempo, loudness and more. FX on a track, or the Effects tab of the inspector, puts effects in a chain that is heard as it plays; Plug-ins there installs your own from a .js file. The track menu shows its volume or pan automation and its spectrogram; the tempo button sets the metronome and a count-in. X shows the mixer: each track’s inserts, sends, output and fader, buses (Reverb return makes one with a reverb), VCAs, and the mix’s true-peak, phase and vectorscope meters. Punch in and out on the selection, and the pre-roll, are in the menu beside the tempo; with Loop on, each pass is a take, and clicking or sweeping across a take in its lane comps it in. On a track shown as a spectrogram, drag a box (Alt for a lasso) and Heal, Turn down or Remove it. Drag the playhead’s handle in the ruler to scrub; the speed button beside the metronome plays at half to twice the speed. Interview clean-up, in Effects and the project menu, trims and levels each speaker and fills the gaps with room tone; Show notes saves the markers as timestamps. Export makes the mix, each track or each region as WAV, FLAC or MP3, or Opus or AAC where the browser can, at the loudness each platform asks for, with the markers as chapters; the project menu processes many files in a batch. Keyboard shortcuts (?) can be changed, or set to Audacity’s. Pro.
A task in the diary has a priority and where it stands; yours are on Today under Your tasks, overdue and high first. Set a budget on a matter (its Overview) by phase; time can name its phase, and at 75% and 100% of the estimate given the matter and Today say so until you record that the client was told. On Risk: Assess a client for money laundering risk (the level, and whether enhanced due diligence is required, are worked out as you answer), and Screen against the sanctions list with the consolidated list file you download from the government yourself (ConList.csv, or the UK Sanctions List as CSV): nothing is fetched, a possible match needs your decision and a reason, and every client is recorded as screened with the file’s SHA-256. The complaints register counts the eight weeks to your final response and the six months the client then has. On a matter: Client money, Ask for money on account, writes the letter and marks it received when the money reaches the ledger; your own payment link (Settings, The practice) goes on invoices and those letters, with a QR code. Documents, Make a bundle, puts the matter’s documents under sections in one PDF with an index, page numbers and bookmarks. Close the file goes through the checklist and sets the date it may be destroyed; Risk lists the files due.
In Practice, on a matter, choose Save a matter file. It writes one encrypted .omatter file holding the matter, its time, bills, documents and diary, and adds what the other applications on this device hold for it: the review from Case (coding, tags and productions, from the case linked to the matter or whose name holds its number) and the matter’s invoices from Books (those whose reference begins with its number). Lock it with a passphrase, and also, if you like, to colleagues’ age keys from KEYRING’s address book. Open the file in Practice, in Case (Share), in PDF Studio or in Books (File): each takes only its own part and keeps the others sealed, as they were, and saving it again writes them back byte for byte. In PDF Studio, File, Add to the matter file puts the document on screen in the matter’s working files.
Taking a file in shows every record it would add, change or take out, beside what this device holds: a change only they made is ticked, one made only here is kept, and one both made is a conflict for you to decide. Nothing changes until you choose. The file carries one audit trail for all four applications, each save sealed with this browser’s own key; a file whose trail, manifest or any part has been changed is refused, and the window says what failed. A part for an application your plan does not include is never opened on this device: the server does not send that application’s code. What it cannot do: anyone with the passphrase can make a new file and seal it with a key of their own, so a seal means most when you know the device that made it, and the times in the trail are that device’s clock.
Open Vector and start a document at any size, open an SVG from Illustrator, Inkscape or Figma, or try the demonstration: a poster and six icons. The tools are down the left on Illustrator’s keys (V, A, P, N, M, L, T); Properties, Layers, Artboards and History are on the right. File, Export makes SVG, PNG up to 32,768 pixels a side, or a PDF with the paths kept as paths and the words as text that can be selected. The scissors (C), the knife and the eraser (Shift E) cut and rub out on the curves; Object, Simplify takes out anchors; Ctrl D repeats the last move, scale or rotation, and Transform each turns every object about its own centre. Properties, Fills and strokes gives one object more than one of each; Object, Pattern makes a swatch from a drawing; Object, Recolour artwork changes every colour at once. While typing, select letters to give them another face, size, weight or colour, on a path as well; the Type menu changes case, and Edit, Find and replace goes through every text. Object, Average lines up anchors; Select, Same picks by stroke weight, opacity, blending, appearance, symbol or text style; Object, Clean up takes away stray points and what nothing uses. The measure tool gives the distance and angle between two points, and a number field takes a sum such as 100 + 20, 50% or 10 mm. File, Record how this was drawn keeps every operation as an Authorship record, and File, Save the authorship record writes the .oauthor file anyone checks free at /verify-authorship, which replays it as pictures. Pro.
Open Erase and choose a passphrase, or open the example. Add your details, then New request: choose the organisation, the law and the right, and the letter is written as you go. Send it from your own email or as a PDF, mark it sent, and the deadline is counted. Note replies on its timeline, or choose Paste a reply: Erase reads it by fixed rules on the device (did it, did part, wants proof of identity, refused, more time, holds nothing), shows the phrases it went by, and offers the next step and its letter; you can always choose otherwise. What comes next, on each request, gives the steps its law allows after it with their dates: the chaser, an appeal where a state gives one, the complaint to the regulator. The case file gathers the facts, the timeline, the letters and what came back into one PDF, and a complaint pack puts the complaint in front. The Directory lists 143 brokers’ and companies’ own routes and the public services, such as the Telephone Preference Service, that reach many at once: tick several and choose Write to them, starting from a goal (stop marketing, purge, find out), to send one letter to each as a campaign, from a queue; the campaign chases the overdue ones the same way. The Data map lists where your data is, from your requests, a checklist and an exported mailbox file, and saves as a spreadsheet or a report. Re-listing keeps the dates to look at brokers again, opens each one’s page, and records what you found. The Overview says what needs you. Plug-in packs (Settings) add organisations and letters; their code runs with no network. For one letter without tracking, the free ACCESS tool writes it. Pro.
Open Converter and drop files, or a whole folder, anywhere in the window, or choose Add files. Each is known by its contents, not its name, and set to the format it is most often wanted in; change it in the row’s list, or choose several rows and set them together on the right, where each format’s options are (quality, size, pages, bitrate and the like). Use for every… remembers the choice for that kind of file. Edit, Presets sets everything a preset fits at once, and Save the chosen as a preset keeps your own. Convert runs the queue a few at a time; each row shows its result against the original, and Show opens it beside it. Save gives one file, or all of them as one zip; in Chrome and Edge, File, Save into a folder writes each result as it is made, and File, Watch a folder converts what arrives in one folder into another while the tab is open. Several pictures, documents, tables or recordings can be made into one file (Make one… of all, on the right). Help, What converts to what lists every conversion. Nothing is kept once the tab is closed but your choices. Pro.
Open Authorship and start writing, start a drawing, or begin from a brief a teacher gave you. Everything you do is recorded as you do it; Record turns on timestamps and says exactly what they send; Share makes an .oauthor bundle. Whoever you give it to checks it free at /verify-authorship, which also opens an example. Pro, and the check is free.
While writing: Outline lists the headings with the words under each; View sets the type, the colours, the spelling check, focus and typewriter scrolling, and the text’s language and direction, right to left included; Statistics counts the text; Export writes Word, PDF, Markdown or text with the record beside it. A drawing has layers and a stroke eraser. A teacher issues a brief from a template, with a rubric if they like; on the checking page anybody can compare two points of a record, and a class’s records chosen together are one table that sorts, sets out facts to look at and downloads as CSV. Records of code from Umbra are checked on the same page: replayed file by file, with every run and how it ended.
On a request, Add an email file (or drop one on it) reads an .eml or Outlook .msg reply on the device: its text is read like a pasted reply, its Date dates the entry, and the email is kept as it came. On Requests, Match replies from a mailbox reads a later export of your mailbox and offers each message from an organisation you wrote to as that request’s reply. Re-listing, Look yourself up, opens each people-search site on its own search, one after another, for you to record Listed, Not listed or Could not tell. Screenshots of a listing (Add before, Add after) are hashed with SHA-256 and dated the moment they come in, and go side by side into the case file. Under the GDPR a request and its chaser can be written in French, German, Spanish, Italian, Dutch or Portuguese, citing the same articles; these are fixed templates not yet checked by a native speaker, and say so. Deadlines skip public holidays where the law moves them: choose the place on each request. The calendar file’s alarms leave out organisations’ names unless you chose to show them.
Open Umbra and open a folder on your computer (Chrome, Edge or Opera), start a project in the browser, import a zip, or try the sample. Run (F5) runs JavaScript, TypeScript or Python in a sandbox walled off from the site; Preview shows a web page as you write it; Format uses Prettier; Source control commits to the folder’s own git repository, a whole file or a single change at a time. Ctrl Shift P lists every command; Keyboard shortcuts changes any key; the line under the console runs JavaScript and Umbra’s own commands (type help). Every save is kept in Local history, and unsaved changes come back when the project is opened again. TypeScript’s language service, a debugger and a test explorer are described below. To hand in how the code was written, choose Record how this was written in the project’s menu, and later Save the authorship record: the .oauthor file is checked free at /verify-authorship. Pro.
In a TypeScript or JavaScript file Umbra runs TypeScript 6.0.3’s own compiler in a worker of its own, fetched from this site the first time such a file is open (11.6 MB, kept by the browser). Type errors are underlined as you type and listed under Problems; completion offers what a type has, and a name from another file with its import written; the pointer over a name shows its type and documentation, and typing a call shows its parameters. F12 goes to a definition, Ctrl F12 to an implementation, Shift F12 lists the references, and F2 renames a symbol in every file that uses it (in place, when it is in one file). Ctrl . offers TypeScript’s fixes for the problem at the cursor and its refactors for a selection; Shift Alt O organises the imports. A count of references sits above each function and class; type hints written into the code, and the service itself, are in Settings. A project’s tsconfig.json or jsconfig.json is read; a file over 1 MB is checked for syntax only. Nothing is sent anywhere.
Press in the margin beside a line, or F9, to set a breakpoint in a JavaScript, TypeScript or Python file; Run (F5) then stops there, in Run and debug (Ctrl Shift D). A web page cannot pause a program in place, so Umbra records the run as it goes (JavaScript and TypeScript instrumented before they run, Python traced with sys.settrace) up to 20,000 steps, and you step through the recording: F5 to the breakpoint’s next time, F10 over, F11 into, Shift F11 out, Alt F10 back a step, Shift Alt F5 back to the breakpoint’s last time, Ctrl F10 to the cursor, or along the slider. The variables, the call stack and the console are as they were at that step. A watch expression added is recorded by running the program again. A variable cannot be changed while paused. Testing lists the project’s tests (for node:test) by file and suite: run one, a suite, all, or the ones that failed, and each is marked beside its line. A pure-Python wheel (a file ending -none-any.whl) kept in the project is installed before each Python run; pip list in the console says what Python has.
An .ipynb opens as a notebook: Shift Enter runs a cell, Run all starts afresh, Save writes the outputs back for Jupyter. A .sql file runs on SQLite; put -- database: data/app.sqlite on its first line to run it on a database in the project, and keep the database if the statements change it. When a Python script calls input() and the Input box has no line left, it asks in the console (in Chrome and Edge); after a run, the files it wrote are listed with a button to keep them. In Firefox and Safari, Copy a folder in brings a folder’s files into a project kept in the browser. In Source control: Blame shows who last changed each line (the status line shows it for the line you are on), Stash the changes puts them aside under refs/stash, and Merge a branch merges another branch, with an editor for each conflict.
An extension is a .js file, or a folder with umbra-extension.json and its main file, installed from your own disk in the Extensions panel; it is kept in this browser. Each runs in a worker of its own in a sandbox with no network: it cannot fetch, open a socket, load a script from an address, or read this site’s storage. It reaches Umbra through one object, umbra: commands.register(id, title, run, { keys }), editor.replaceSelections, replaceRange, setText and insert while one of its commands runs, window.say and notice, snippets.add(language, list), formatters.register(language, fn), linters.register(language, fn) and themes.register(theme). Write a new extension (in the panel) puts a file with every part of this in the project; Install the open file as an extension starts it, and each save starts it again.
Open Books and start a company, open a .obooks file, or open the demo company. Bank imports a statement (CSV, OFX, QFX or QIF) and explains each line to an account, an invoice or a bill; a rule explains the regular ones. Sales and Purchases hold invoices, quotes, credit notes and bills, each with its PDF. VAT works the nine boxes out for a quarter, each box opening on its lines; it does not submit them to HMRC, which needs bridging software or the HMRC website. Reports covers any period against the one before, as PDF or CSV. A company’s Directors place keeps each director’s loan account, works out section 455 at a year end, and declares dividends out of the reserves, with the board minutes and a voucher for each shareholder. Payroll posts each month’s figures from your payroll software as one journal and shows what is owed to HMRC by tax month; with the Construction Industry Scheme turned on there, a subcontractor’s bills take the deduction off the labour as they are paid, and the monthly return’s figures and the statements are made for you. Projects sets each job’s income and costs against its budget; up to two tracking categories of your own split the profit and loss. Find and recode moves many lines to another account, VAT code or project at once, and Cash forecast shows the next thirteen weeks. Save the company as a .obooks file from File (Ctrl S); press ? for the other keys.
Open Roots and start a tree, open a GEDCOM, GEDZIP or Gramps file from another program, or try the demonstration tree. The views are along the top: pedigree, descendants, hourglass, fan, family group, the person’s page, timeline and relationship; Research finds impossible dates and people entered twice; Charts, Book and Share make posters, a book and files to share with living people kept private. Pro.
A source can follow a template (census, parish register, certificate, will, newspaper, website and others), and is then cited as Evidence Explained sets it. Places finds a place written several ways and makes it one, and puts places on a map drawn on your device. DNA takes match lists or matches typed in, with their shared matches, and gathers them into clusters. Book also makes the ancestors of one person in Ahnentafel order, a family group sheet, a timeline and a relationship. Tools, Plug-ins runs reports, charts and importers written by others, each in a sealed worker with no network: a plug-in is a .orootsplugin file whose code calls rootsPlugin({ run(input, roots) }) and gives back { title, html }, { title, svg } or, for an importer, { people, families }. The three examples there save as files to read.
Person, Enter a census household types a census page in once: choose the census, the address and the reference, check each row (people already in the tree are found and offered), and every person gets their census fact, the head’s holding the household in their roles. Any fact can have others at it, each in a role, from its dialog: a witness, a godparent, an informant. Tags (Person, Tags on the person; Tools, Tags) mark people, families and sources with a colour shown on the charts; in People, A filter of your own combines rules and keeps them by name, and Share these people saves just those as a file. Relationship lists every path between two people under Every path. DNA’s Chromosomes tab reads segment files from FamilyTreeDNA, MyHeritage, GEDmatch or 23andMe; Triangulation lists the matches that overlap and whether their shared matches support it; The odds weighs where somebody of unknown place fits, in the manner of What Are The Odds?, against the Shared cM Project’s ranges.
Open Research and open the demo, an SPSS .sav, CSV or Excel file, or a survey with open answers. Analyse runs the tests with APA tables and a sentence to report; Transform computes, recodes and selects cases; everything run is written as syntax that can be run again. Sources holds transcripts and open answers: select text and press C to code it. Queries searches, counts words, crosses codes with attributes and measures agreement between two coders. Pro.
Transform, Weight cases counts each case by a frequency variable, as SPSS’s WEIGHT BY; a .sav file’s weight is applied when it opens, and the status bar says so. Transform, Multiple imputation fills each missing value several times by chained equations; from then on, every analysis of those variables that can be pooled (t-tests, correlations, linear, logistic and generalised linear regression, mixed models) adds a table pooled by Rubin’s rules under its usual output, until the data change. For repeated measures, Transform, Restructure turns one row per person into one row per measurement, which Analyse, Linear mixed model needs.
Open Write and start a novel or a screenplay, open a .owrite project, import Word, Markdown, text, Fountain, Final Draft or a Scrivener project, or try one of the two samples. The binder is on the left and the inspector on the right; Corkboard, Outline, Timeline, Bible, Targets and Submissions are along the top. Compile makes standard manuscript format in Word and PDF, an EPUB, or the screenplay as PDF, Final Draft and Fountain. Pro.
Keywords are typed into the inspector and shown on the cards and in the outline; Collections, beside the binder, gathers documents by hand or as a saved search (Find, Save as a collection). The project menu’s Bring back a Word file an editor returned puts their tracked changes and comments into the scenes, to accept or reject in the inspector’s Review tab. Spelling (F7) checks in British or American English, set in Project settings, with Add to the project’s dictionary. In a script, Alternates keeps other versions of a line, Tag marks breakdown elements for the breakdown sheets in Reports, and Plotlines lays scenes against the story’s threads.
3D parts opens on an example mounting plate: add features from the toolbar and change any dimension in the History. 2D drawings, Foundry, drafts, lays drawings out on sheets and prints them to scale, with DXF in and out and G-code for a laser or router; File, Make drawing in the 3D parts puts a part’s views on a Foundry sheet. Inspect, Stress analysis holds a body by chosen faces, loads others and works out its stress, safety factor and deflection on this computer; Inspect, Shape optimisation then finds the stiffest layout of a share of its material and adds it to the part. File, Plug-ins (in Foundry, Tools, Plug-ins or APPLOAD) runs part generators, reports and exporters in a sandbox that can reach nothing. In Foundry, XATTACH shows another DXF or Foundry drawing in this one and XREF reloads, binds or detaches it. Help, Take the tour, shows where things are. Pro.
With Kernel set to Exact: a fillet can vary from one radius to another along its edges, round every edge between two sets of faces, or make a full round over a wall; Push/pull moves flat faces of any body, a STEP file you imported among them; and assemblies are built with true surfaces. Configurations, in the Variables panel, can leave features out and give a feature’s fields values of their own, and Export all writes each one. File, Derive from a part brings another part’s bodies into this one and keeps them up to date; in an assembly, Insert a part, Body by body puts a part of several bodies in as a component for each. In Foundry, BEDIT opens a block for editing, where BPARAMETER gives it a stretch, a flip or visibility states (BVSTATE) that each insert can change; QDIM dimensions everything chosen at once.
Also with Kernel set to Exact: a fillet can take its radius at points along an edge (per cent along, radius; …); Delete face takes away a hole, a pocket, a slot or a boss and closes the gap, and Move face moves one by a distance, on any body, imported STEP files too. A face whose gap would need the faces around it extended, such as a fillet’s, is refused: the OpenCascade build used here lacks that part. In an assembly, Assembly, Project edges into a part writes one component’s outline, or its section, into a sketch of another component’s part, where they sit; the Assembly panel lists each reference with Update and Break. A sheet metal flat pattern takes holes cut across a bend, unbent along the bend’s neutral axis. In Foundry, ANNOTATIVE makes text and dimensions keep their size on the paper, ANNOSCALE sets the model’s annotation scale, OBJECTSCALE the scales each supports, and ANNOALLVISIBLE whether a viewport shows the rest; Print takes a plot style table, by colour (.ctb) or named (.stb, with PLOTSTYLE or a layer’s style), one of Foundry’s or read from a file, and saves one as a file.
Open Case and start a case, open a case file, or load the sample. Load takes email, Outlook files, PDFs, Office files and pictures, loose or zipped, for a custodian; Review searches them and codes them with keys 1 to 9; Review also redacts, with boxes on a PDF or a picture or passages of text; Produce numbers the documents with Bates numbers and saves the pages, text, natives and load files (DAT and OPT) with a privilege log; Chronology, People and Exhibits build a chronology, a map of who wrote to whom and exhibit bundles; Audit shows the trail of everything done, chained by SHA-256; Share hands a case or a review set to another reviewer and merges their coding back. Kept in this browser. Pro.
Analytics ranks what is not coded by how likely it is to be Responsive (or any tag you choose), from the documents coded each way, and can rank again as you code; Review’s order Likeliest responsive first follows it, re-ranking below the document on screen. It shows the ranking’s precision, recall and AUC by five-fold cross-validation, and the documents found in the order they were coded. Draw an elusion sample of the documents not coded on Batches and answer it, and Analytics estimates recall from it, with its interval; Save the stopping report writes the figures and the method. The ranking is logistic regression on TF-IDF vectors of the documents’ words, trained on the coded documents and up to 100 others presumed against (Cormack and Grossman’s baseline model implementation); recall is R / (R + eN), R the documents coded responsive, N those not coded and e the share of the sample found responsive, its interval from e’s Wilson interval. Clusters (spherical k-means on a 100-dimension latent semantic analysis of the same vectors) are named by their commonest words and searched as cluster:3; More like this, on Review, finds documents near one, or near the words selected in it, in that space; Related words offers words used in the company of the search’s; Categories suggests the documents not coded to the tags you choose, from the documents coded with them, each accepted by you, and Undo takes it back. Each document’s language comes from its commonest words and its alphabet, searched as lang:fr. Search also takes recieve~ (within one letter) and /regular expressions/, run over the text with a time limit. Highlighting marks sets of words, each in its colour, in every document. A PDF or zip with a password asks for it on Review; it is kept in the tab’s memory, never saved. Overview sets the case’s time zone, in which Review shows times with the UTC time beside them. All of it runs in the browser tab.
Desk, Record, Standard and Trace hold single tools for particular jobs: letters and rotas, evidence and deadlines, lifting and loading, logs and artefacts. Each is free to open and to check a file with; saving the result is Pro.