Record-level encryption
Every record and every version of it is sealed with its own AES-256-GCM key; record keys live only inside the per-chunk key blocks.
Your data, encrypted, with provable deletion.
From customer records to device data, anything that is JSON. Reindeer seals every record with its own key, keeps the data on a closed IPFS network in Türkiye and gives you a signed erasure certificate for every record you delete. These docs explain the system end to end.
Provable deletion
Deleted records drop out of reads at once, leave the key blocks at the weekly roll, and the old epoch keys are destroyed.
Two-person rule
Batch deletions, full exports, new identities and organisation activations wait for a second person’s passkey approval.
Verifiable audit
Key journals are hash chained and sealed with signed checkpoints; you run the verification yourself.
Where to start
Section titled “Where to start”What Reindeer isWhat the product guarantees and what it does not.
QuickstartConnect the console, create a passkey, upload a first batch.
The path of a recordEvery step from upload to destruction.
API basicsAuthentication, errors, safe retries and time budgets.