Early access. gotin opens in January 2027. Uploads are paused until then, and these pages describe how it will work. About gotin
Book a demo
Redaction

Send the page.
Hide the numbers.

gotin finds sensitive details on your device and you approve what to hide. The recipient gets a redacted copy. The original opens only with a second password.

Planned

Planned for after launch. Nothing on this page is available yet. It shows how each piece will work.

For your client

Checked on their device, before it is sealed.

The wrong file, a cut-off scan and a number nobody asked for are caught before anything is sent. The check runs in your client's browser, so nobody else reads the file to do it.

01

They pick a file

It stays on their device.

02

gotin checks it

Is it readable, are all the pages there, and is it the kind of document you asked for.

03

It marks numbers you did not ask for

An account number or a Social Security number the request does not need. Your client hides it or keeps it.

04

Then it is sealed

You receive the copy your client approved. We never see the file, before or after.

For the sender

Find it, approve it, seal it.

01

Drop a file

It stays on your device.

02

gotin marks what looks sensitive

Social Security numbers, account numbers, names, dates of birth. The scan runs in your browser.

03

You decide

Hide or keep each mark, and add anything it missed by hand.

04

One sealed package, one link

You share a reveal password separately, by phone or Signal.

For the recipient

A redacted copy first. The original with a second password.

01

They open the link with a passkey

The first time, they create one and the link is bound to it. They see the redacted copy.

02

If they are entitled to the original

They enter the reveal password. The original appears on their device.

03

Without the password

The hidden details are not in the redacted file at all. They cannot be recovered from it, by anyone.

How it is built

Five parts, all on the device.

Detection, redaction and reveal run in the browser. The only part that runs elsewhere is training, and it never sees a customer file.

Part 1

Detection engine

Rules for structured numbers such as SSNs, EINs, cards and routing numbers. A small model for names and addresses. Both run in the browser.

Part 2

Training pipeline

Runs offline on made-up documents only. It produces the model the browser loads. It never touches customer files.

Part 3

Redaction pipeline

Builds a new file with the sensitive content removed. Pages are rebuilt from the page image, so nothing sits under a black box. The copy is a picture, so its text cannot be selected.

Part 4

Reveal layer

The original, encrypted under a key that needs both the passkey and the reveal password. Either one alone fails.

Part 5

Review and reveal screens

The sender's approval screen and the recipient's step to reveal the original.

Intake assistant

Sorts what arrives, and tells you what is still missing.

After you open a request on your device, gotin works out what each document is, gives it a clear name, and checks it against the list you asked for.

  • Recognizes common documents: W-2, 1099, bank statement
  • Names each file the same way every time
  • Shows what the client has not sent yet
  • Pulls out the values you asked for, so you can keep those and delete the document
  • Makes a redacted copy for staff, with the original behind a second password

Checklist

2 of 3
2025 tax documents, Brandt
W-2Brandt, W-2, Northgate Supply.pdf
1099-INTStill missing
Bank statementBrandt, bank statement, 2025-12.pdf
Sorted and named on your device, after the files were opened. Our servers never see what kind of document it is.
What our server sees

Encrypted pieces and rounded sizes.

It sees

  • Encrypted segments of the package
  • Their sizes, rounded up

It does not see

  • What is in the file
  • What was detected or hidden
  • The reveal password
  • Whether a package has a reveal layer at all
Limits

What it is not.

Limit 1

Not guaranteed detection

It is assisted redaction. A person approves every package, and should read the page first.

Limit 2

Not recoverable

If the reveal password is lost, the original cannot be opened. We cannot reset it.

Limit 3

Not FIPS validated

The cryptography runs in the browser and is not FIPS validated there.

Sending documents with numbers in them?

Show us a page you would redact. Fifteen minutes on a call.