100% local
ARCAN encrypts and decrypts exclusively on the user’s machine. No mandatory connection, no remote service, no hidden API calls.
ARCAN is a 100% local encryption suite designed for public institutions, critical infrastructures and responsible organisations that refuse to entrust their most sensitive data to external servers or opaque clouds. No cloud, no telemetry, no account. Your files stay where they belong: under your control.
ARCAN definitively seals your files and folders locally, with no server, no account, no tracking and no exploitable traces.
ARCAN was built as a civil, sovereign and ethical tool. Security is not a marketing slogan, but a mathematical contract between your organisation and its data.
ARCAN encrypts and decrypts exclusively on the user’s machine. No mandatory connection, no remote service, no hidden API calls.
No file is ever sent anywhere. You choose your own storage: internal disks, encrypted drives, secure internal infrastructures or air-gapped media.
ARCAN does not collect usage data, identifiers or addresses. It knows nothing about you — and does not need to know anything to protect you.
Passwords are neither stored nor transmitted. They are used once to derive the cryptographic key and then discarded. Losing the password means irrevocably losing access to the content.
Perpetual licence per workstation, with no recurring fee. Once activated, ARCAN keeps working offline, even without any connection to the network.
Every ARCAN executable is built, signed and verified in an air-gapped cryptographic forge. The binary you receive is exactly the one we have audited.
ARCAN is designed to be easy to deploy, easy to use and easy to explain — to an auditor, a board, a regulator or a public authority.
Individual encryption of sensitive files (reports, contracts, exports, legal documents, medical records, etc.) with cryptographic integrity chaining for each sealed object.
Recursive encryption of entire folders (projects, case files, internal archives) in a single operation, preserving the original structure.
A “quick seal” mode for on-the-fly encryption of punctual items: short notes, temporary data, configuration fragments — with no complex configuration required.
Each sealed file enforces a strict limit on password attempts. Beyond this threshold, the seal is no longer accessible, providing additional protection against brute-force attacks.
Each seal can include a chained integrity log (timestamps, context, operator) protected by a SHA-256 hash chain, to demonstrate integrity over time in internal or external audits.
A standalone ARCAN Reader allows authorised recipients to open sealed files without exposing the full sealing engine. Ideal for cross-organisation exchanges and tightly controlled environments.
ARCAN was designed for real office environments — not lab simulations.
ARCAN encrypts Office files without opening or altering them. The original document remains strictly unchanged: only the sealed copy is protected.
Office applications never access the ARCAN core engine. Office simply produces files; ARCAN encrypts them independently, treating documents as raw binary data.
ARCAN remains 100% offline even on connected machines. No remote APIs, no remote servers, no data exfiltration: encryption happens on your workstation and nowhere else.
Compatibility depends only on the Office version installed (DOCX, XLSX, PPTX, etc.), within the limits of the underlying platform.
ARCAN is for organisations that must be able to prove — with clear logic and standard algorithms — that no third party can access certain documents, even under pressure or legal injunction.
Standard, recognised algorithms (AES-256-GCM, PBKDF2-HMAC SHA-256), no cloud, no backdoor, offline operation. Everything can be explained in a few lines to an auditor or regulator.
No unnecessary jargon. ARCAN is easy to present to a board, risk committee or steering group without requiring deep cryptographic background.
ARCAN does not monitor, profile or track. It protects your files — nothing more, nothing less. How you use it remains your responsibility and your sovereignty.
ARCAN does not promise the impossible. It clearly states what it guarantees — and what it will never do. Clarity is part of its security model.
ARCAN does not hide anything: it protects. If the password is lost, the file is lost — permanently. There is no master key, no hidden recovery, no privileged back door.
This constraint is deliberate: it guarantees that no vendor, provider, authority or attacker will ever hold a universal key to your sealed data.
ARCAN is part of a real digital-sovereignty approach: what you encrypt belongs to you — and no one can quietly take it back.
All ARCAN executables are built and verified in an isolated environment, without network access, before being signed. You can document this manufacturing chain in case of internal control or independent audit.
An official video will present ARCAN’s architecture, cryptographic choices and philosophy. It will be published at the time of the public launch.
This section will host the official video (YouTube / institutional channel), together with a direct link to the full press kit.
Until then, you can consult the press kit and the ARCAN Doctrine in the Documentation section.
Whether you are a public administration, a private enterprise or a sensitive institution, ARCAN can become your sovereign cryptographic backbone.