Skip to content

Obsidian plugin · Encrypted sync

Securedknowledge base sharingfor the whole team.

Per-file permissions, AES-256-GCM encryption on your device, an audit log of who opened what, and AI Chat that only reads what you allow. On the Obsidian vault you already run.

See what it does

Installs on the vault you already have. Nothing moves. It is still plain markdown.

What it does

Everything a team needs Obsidian to do.

One plugin. AI Chat sits on top of your vault, and everything under it decides what the AI, and everyone else, is allowed to see.

New

AI Chat, inside Obsidian.

Ask questions of the notes you are allowed to see. It searches your permitted files, drafts and revises markdown, and shows you the diff before anything changes.

It cannot read a hidden folder or an excluded file just because the prompt asked it to. Unsupported tools fail closed.

Permission per file

Access granted file by file, so you can open the vault to the team without opening it to everyone.

Encrypted on your device

AES-256-GCM for supported files before upload, with local at-rest protection on supported vault paths.

A log of who opened what

Every sync, share, and permission change written down, including what people read through the server.

One gate for every agent

Compatible desktop agents connect through the Agent Bridge, on access you can revoke and a log of bridge activity.

See it run

You can be live this afternoon.

Create the organisation, invite a teammate, install the plugin, then watch the same note change shape for an admin and for a viewer, including what that file looks like opened outside Obsidian.

2 min 47 s · narrated

Recorded in VaultGuard Cloud and in Obsidian. English captions are available from the player controls.

1Install on your vault.

No migration, no moving day.

2Answer five questions.

Sharing and permissions go live in minutes.

3Open the gate.

Connect a compatible desktop agent. Permission aware, and bridge activity logged.

Open the step-by-step setup guide →

Pricing

Start free. Grow when the team does.

Governing what your models can read costs €12 a head, or €9 per user, per month billed yearly. Your AI provider charges separately.

MonthlyYearlySave 25%

Community

Free

host it yourself

The full plugin and server, source-available. Deploy the encrypted sync stack on your own AWS with Terraform.

  • Up to 100 users, no per-seat licensing
  • The same encryption as Cloud
  • Per-file permissions
  • The in-Obsidian admin
  • Source-available, fair-code license
Get it on GitHub
Most popular

Pro

€9 per user, per month

€12 per user, per month

Billed yearly. Save 25%.

€9 per user, per month billed yearly. Save 25%.

Managed cloud, no ops for you.

  • Everything in Community
  • Web admin panel
  • Share links for teammates
  • Full audit log
  • Up to 100 users

14-day Pro trial. Payment method required.

Enterprise

Custom

let us talk

Dedicated infrastructure, sized to you, and security documentation for your team to review.

  • Scale beyond the 100-user Pro tier
  • 1 TB storage
  • Single sign-on
  • Dedicated infrastructure
  • Security documentation for your review
  • Priority support
Contact sales

Every plan keeps your data in plain markdown. Leave whenever you like and take everything.

FAQ

The honest answers.

Do I have to migrate?

No. VaultGuard installs on the Obsidian vault you already have. Nothing moves.

Can you read my notes?

We are straight with you: it is not zero-knowledge. Supported notes are encrypted on your device before they sync and stay encrypted at rest while Obsidian is active. Encryption is server-managed, so the backend can handle your keys and process plaintext transiently for authorised recovery. It can see basic metadata like filenames, paths, sizes, versions. Excluded paths, caches and files in a plaintext-pending state can remain unencrypted locally. Sync follows the configured file-size limit. Prefer to hold it all yourself? Self host, and the whole stack runs in your own AWS.

What happens when someone leaves?

Revoking access blocks new authorised server requests. Devices enforce revocation when they reconnect or their key lease expires. Key rotation does not erase old keys or copies already on a device. Anything already exported is out in the world and no tool can pull it back, and we will not pretend otherwise.

What can the AI actually read?

Only what the person asking is allowed to read. AI Chat respects the same selected vault, path permission, hidden path and audit boundaries as every other protected operation, and unsupported tools fail closed. You add your own provider credential locally, and provider charges are separate from your VaultGuard plan. We audit the actions without copying note bodies into the log.

Which AI tools work?

Claude works natively, with your own Anthropic key or Claude subscription. Compatible desktop MCP clients can connect through the local Agent Bridge, on a scoped lease you set narrow and revoke when the task ends. Access through the bridge is checked and audited; it does not control tools that read your filesystem directly.

Who built this, and why should I trust you with it?

We were a small team running our whole company on Obsidian and we hit the same wall you did: no safe way to share it, and no way to know what anyone had read. We built the upgrade and we run our company on it every day. The security core is built and tested by real users. The deeper AI layers ship over the next year, and we will say so plainly until they do. If we vanish tomorrow, your vault is still just Obsidian.

One plugin adds everything a team needs to Obsidian.

Permissions, encryption, the audit log, and AI Chat. On the Obsidian you already run.

Open the setup guide

Nothing to migrate. Nothing new to learn. Your data stays yours.