Personal Sync

Your memory travels. Your plaintext does not.

Docmancer Cloud is the managed companion to the free local product. It replicates encrypted revisions between approved devices, decrypts the memory graph in your browser, and can ask an explicitly started Docmancer device to perform local-only work without exposing the action or result to the service.

See plans →

What you get

Encrypted sync across unlimited personal devices
A browser workbench for atoms, relations, history, context, and review
An encrypted local relay for sources, docs, audit, hooks, provider-backed work, and other TUI actions
Recovery, version history, snapshots, device revocation, key rotation, export, and remote deletion

What remains free

Local discovery, indexing, recall, and ranking
CLI, TUI, MCP, capture hooks, and agent integrations
Git-versioned team memory and local promotion
Local audit, export, and every retrieval-quality improvement

Failure is local-first

If the cloud service is unavailable or a subscription lapses, local recall and capture continue. Pull and export remain available during the final download window, and disconnecting returns you to the complete local workflow.

How the local relay works

Run docmancer cloud relay --project "$PWD" on an approved device. It polls outbound over HTTPS and opens no local port. Read actions are available by default; local mutations also require browser confirmation and --allow-writes. The relay accepts a fixed Docmancer action list, never shell commands.

Cryptographic boundary

Each device holds private keys. The service receives ciphertext, signatures, wrapped workspace keys, opaque references, and delivery metadata. Relay action names, arguments, results, query text, and local paths remain encrypted. Requests expire in minutes, and expired relay ciphertext is pruned after 24 hours. Email login alone cannot decrypt an existing workspace.