It opens no network sockets
The app has no server, no sync and no cloud back end. Open Activity Monitor, Resource Monitor or netstat while it runs and you will find nothing listening and nothing dialling out.
For audit, tax and legal work
The Ultimate Offline Document Workbench.
One secure local environment for every file they send. Unlock and redact PDFs, strip the metadata off an Excel schedule, and read the Word letter without opening Office—instantly, and with no internet connection.
macOS, Windows and Linux · 14-day trial · from ₹999 a year
NO UPLOADS · NO ACCOUNT · NO TELEMETRY · NOTHING CHANGES WITHOUT A RECORD
Why this one is different
Most document tools ask you to upload the thing you were trying to protect.
Oxofolio does the work on your own machine. That is not a policy we wrote down — it is how the application is built, and your IT team can check it in about ten seconds.
The build refuses to ship network code
A check runs before every release and fails the build if any shipped source so much as imports a networking library. It is not a promise anyone has to remember to keep.
No account, and no activation call
There is nothing to sign up for. The licence is a signed file your own copy of the app verifies offline — it never phones home, because a licence check that phones home would contradict the product.
A workbench, not a tool
The unit of work is the folder, not the file.
A tool does one thing to a file you hand it. Oxofolio opens the folder as it actually arrived, shows every document as itself, and keeps it inside the application through inspection, conversion, redaction, encryption and the evidence at the end.
- Every file gets a type — PDF, image, Word, Excel, PowerPoint — not just the PDFs
- Tiles are drawn from real content: a PDF’s first page, a sheet’s top-left corner, a letter’s letterhead, a deck’s opening slide
- Four viewers, read-only by default — with cell references, a formula bar, a document outline and real page numbers
- A format it cannot read is listed and says why, instead of being silently invisible
Why that matters more than any single feature
Every hop between tools is another copy of a client’s bank statement sitting in a folder nobody is tracking. Round-tripping through Acrobat, Excel and Word to finish one engagement leaves a trail of them.
Not leaving is the security claim and the workflow claim at the same time — which is why they are the same sentence.
Everything in one window
The whole job, without changing tools.
Built for documents as they actually arrive — scanned, locked, badly named and in the wrong order. Twelve of the sixteen workspaces are below; OCR, Protect, the folder inventory and the viewers are on the features page.
⌾
Unlock
Open password-protected PDFs in batches using passwords you already hold. Your passwords stay in one isolated process and are never written to disk.
⤡
Compress
Make big scans small enough to send. Honest about the trade-off: you choose the quality, and see the saving before you keep the result.
⧉
Combine & split
Merge a pile of files into one ordered document, split a long one into useful parts, or pull out exactly the pages you need.
◇
Redact
Delete sensitive text from the file itself, not just cover it — then let the app re-read the finished PDF to confirm the words are gone.
⬚
Find personal data
Scan a document for identity and tax numbers, account numbers and contact details, and see exactly where each one sits on the page.
⌥
Extract
Read the figures off invoices and receipts into a table you can export — with the page and the exact snippet each value came from.
⇄
Convert
Turn a PDF back into a workbook or a Word document. The grid it found is shown on screen, and nothing is written until you press Convert.
✎
Mark up
Rotate, crop, highlight, box, arrow and redact a photographed statement — always into a new file, never over the client’s original.
◫
Images
Pages out as pictures at the resolution you choose, and a client’s phone photographs back in as one ordered PDF.
≡
Organise
Rename a folder to a rule, preview every change before it happens, and catch the same document filed twice under two names.
▤
Assemble
Build a numbered bundle with a contents page, stamp sequential page references across the whole set, and place a signature or stamp image.
◔
Sample
Draw a selection anyone can re-perform and get the identical result, with a certificate stating the algorithm and the population it came from.
New in 0.1.3 · Convert
Every “PDF to Excel” button is a confident guess. This one shows its working.
A PDF does not record that it contains a table. It records glyphs at coordinates, and a table is only the observation that many of them start at the same few positions, line after line. So Oxofolio measures the page, shows you what it measured, and writes nothing until you have looked.
- The signals behind the suggestion are shown next to it, and the grid it found is previewed
- The preview and the conversion share one piece of geometry, so they cannot disagree
007stays an account number and(1,240.75)stays negative money — the number rules are deliberately conservative- The workbook carries a Source sheet naming the PDF it came from and what was assumed
- A page with no text layer is refused and routed to OCR, rather than converted into a blank document
What it will get wrong, stated up front
A form, a two-column report and a scan with a poor OCR layer all look like tables to any geometry-based reader, including this one. You are told that before you convert, not after.
Word conversion rebuilds what Word can hold — paragraphs, headings, bold and italic, tables, images, page size and margins. What it does not reconstruct is listed rather than discovered: exact line breaks, hyphenation, columns of prose, footnotes and running heads.
An editable document that reads correctly — not a replica of the page.
Redaction that is actually redaction
A black box over a number is not a redaction.
Draw a rectangle in most editors and the digits are still sitting in the file underneath — selectable, searchable, copy-pasteable. The document now looks handled, which makes it more dangerous than before.
- The text operators are deleted from the file, not covered
- The black mark is drawn only as the visible evidence of the removal
- The finished PDF is read back to verify nothing survived
- On a photograph the marks are burned into the pixels, then read back out of the saved file and checked
A record you can hand over
Know exactly what happened to every file.
Every operation is written to a processing log: what was done, when, on which machine, with the SHA-256 fingerprint of every file that went in and every file that came out.
- Prove a document is the one you started with
- Seal the file at the report date, and see exactly what was added, removed or altered afterwards
- Show what was processed, and when, without keeping notes
- Passwords never appear in the log — deliberately
Safe by default
Nothing changes by accident.
Unlock, compress, combine, convert, redact, encrypt, split, stamp, OCR, mark up — every one of them writes a new file beside the source and leaves the source exactly where you put it.
- One feature writes in place on purpose: light edits to a spreadsheet. It is off by default
- Before the first such write, the file as it arrived is copied to
_originals/and hashed — and never refreshed, so a later edit cannot quietly become the original - The change goes into the processing log, like every other operation
- Results are written beside the source, not into a hidden app folder
- No thumbnail cache — a rendered page of a bank statement is the bank statement
India and everywhere else
Almost none of this product is country-specific — and we say which part is.
The document engine and the evidence layer do not know what country they are in. The standards behind the evidence are international: ISA 530, ISA 230, ISQM 1, GDPR Articles 30 and 32, NIST SP 800-88.
◍
Works the same anywhere
Every tool on this page, the whole evidence layer, and personal-data detection for IBAN, e-mail and labelled account numbers. Dates and decimal separators are a per-folder setting — India, UK, EU, US or ISO — chosen rather than guessed.
◈
Ships configured for India
Aadhaar, PAN, GSTIN, IFSC and Indian mobile detection, six statutory retention presets, and a check for a folder that has picked up a second client’s papers.
◎
No residency question at all
There is no server to host in your region, no sub-processor list and no transfer mechanism, because there is no transfer. Where a data-localisation rule applies, it is satisfied by construction.
Straight answers
The questions people ask first.
Can Oxofolio open a PDF if I have lost the password?
No, and it never will. Oxofolio applies passwords you already have — across a whole folder at once, so you are not typing the same one forty times. There is no brute force and no guessing in the product, by design.
Does it work without an internet connection?
Entirely. Pull the network cable and every tool still works, because none of them ever needed it — including the licence check.
What happens to my files?
They stay in the folder you chose. Nothing is uploaded, nothing is copied to a cloud store, and the app keeps no second copy of your documents anywhere on your machine.
Do I need an account?
No. You buy a licence key and install it in the app. There is no sign-up, no profile and nothing to log in to.
Can it edit Word and Excel files?
It reads them; nothing in the viewers writes. A total this app calculated, sitting beside totals your client calculated, would be indistinguishable from theirs and wrong. The formula bar shows what was read out of the file, never a value we computed.
Is it only for audit and accounting firms?
That is who it is built for, and the sampling, file-assembly and retention features assume that work. Everything else — the viewers, unlock, redaction, conversion, the processing log — is useful to anyone who cannot upload the documents they were asked to protect.
Fourteen days, everything unlocked
Download Oxofolio →