Audit & assurance
Draw a sample anyone can re-perform, with a certificate stating the algorithm and the population. Seal a file at the report date and see exactly what changed after it.
Audit sampling →
Offline document software for audit, accounting, tax and legal firms
Work on client files without uploading them anywhere.
Unlock and redact PDFs, strip the metadata off an Excel schedule, and read the Word letter without opening Office — on your own machine, with no internet connection.
Every tool free for 14 days · macOS, Windows and Linux · from ₹999 + GST a year
- Network sockets
- None opened — check with
netstat - Account
- None. Nothing to sign up for
- Licence
- Ed25519 file, verified offline
- Every build
- Signed, with its SHA-256 published
Why this one is different
Most document tools ask you to upload the thing you were trying to protect.
Oxofolio does the work on your own machine. That is not a policy we wrote down — it is how the application is built, and your IT team can check it in about ten seconds.
-
It opens no network sockets
The app has no server, no sync and no cloud back end. Open Activity Monitor, Resource Monitor or
netstatwhile it runs and you will find nothing listening and nothing dialling out. -
The build refuses to ship network code
A check runs before every release and fails the build if any shipped source so much as imports a networking library. It is not a promise anyone has to remember to keep.
-
No account, and no activation call
There is nothing to sign up for. The licence is a signed file your own copy of the app verifies offline — it never phones home, because a licence check that phones home would contradict the product.
For your IT or data-protection review
Everything a supplier review asks for, published before anyone asks.
The architecture, a completed vendor questionnaire and our data-protection position are on the site in full — including the answers that are unfavourable. Forward the link to whoever has to sign this off.
- Security overviewProcess by process: what each part can reach
- Vendor security questionnaireAnswered, unfavourable answers included
- Data protection positionWhy we are neither controller nor processor
- Deployment notesNo admin rights; what it writes and where
- Release hashesSHA-256 published for every build
- SBOM & componentsAvailable on request
The documents that cannot go through a website.
Bank statements, payroll, contracts and identity papers arrive every day. Here is what each kind of practice does with them in Oxofolio.
Tax & accounting
Unlock a batch of password-protected bank statements, read invoice figures into a table, and find IBANs and account numbers — plus PAN, Aadhaar and GSTIN in the India pack — before a file goes out.
Batch unlock →Finance teams
Compress, combine and redact what goes to banks, auditors and regulators — without putting payroll, contracts or board papers through an online converter.
Offline compression →Legal & compliance
Build a numbered bundle with a contents page, and redact so the text is deleted from the file — then let the app read the result back to confirm it is gone.
Verified redaction →
Redaction that is actually redaction
A black box over a number is not a redaction.
Draw a rectangle in most editors and the digits are still sitting in the file underneath — selectable, searchable, copy-pasteable. The document now looks handled, which makes it more dangerous than before.
- The text operators are deleted from the file, not covered
- The black mark is drawn only as the visible evidence of the removal
- The finished PDF is read back to verify nothing survived
- On a photograph the marks are burned into the pixels, then read back out of the saved file and checked
The unit of work is the folder, not the file.
A tool does one thing to a file you hand it. Oxofolio opens the folder as it actually arrived, shows every document as itself, and keeps it inside the application through inspection, conversion, redaction, encryption and the evidence at the end.
- Every file gets a type — PDF, image, Word, Excel, PowerPoint — not just the PDFs
- Tiles are drawn from real content: a PDF’s first page, a sheet’s top-left corner, a letter’s letterhead, a deck’s opening slide
- Four viewers, read-only by default — with cell references, a formula bar, a document outline and real page numbers
- A format it cannot read is listed and says why, instead of being silently invisible
Why that matters more than any single feature
Every hop between tools is another copy of a client’s bank statement sitting in a folder nobody is tracking. Round-tripping through Acrobat, Excel and Word to finish one engagement leaves a trail of them.
Not leaving is the security claim and the workflow claim at the same time — which is why they are the same sentence.
The whole job, without changing tools.
Built for documents as they actually arrive — scanned, locked, badly named and in the wrong order. Twelve of the sixteen workspaces are below; OCR, Protect, the folder inventory and the viewers are on the features page.
Unlock
Open password-protected PDFs in batches using passwords you already hold. Your passwords stay in one isolated process and never appear in a log. They are saved only if you choose to remember them, and then encrypted by your operating system’s keystore.
Compress
Make big scans small enough to send. Honest about the trade-off: you choose the quality, and see the saving before you keep the result.
Combine & split
Merge a pile of files into one ordered document, split a long one into useful parts, or pull out exactly the pages you need.
Redact
Delete sensitive text from the file itself, not just cover it — then let the app re-read the finished PDF to confirm the words are gone.
Find personal data
Scan a document for identity and tax numbers, account numbers and contact details, and see exactly where each one sits on the page.
Extract
Read the figures off invoices and receipts into a table you can export — with the page and the exact snippet each value came from.
Convert
Turn a PDF back into a workbook or a Word document. The grid it found is shown on screen, and nothing is written until you press Convert.
Mark up
Rotate, crop, highlight, box, arrow and redact a photographed statement — always into a new file, never over the client’s original.
Images
Pages out as pictures at the resolution you choose, and a client’s phone photographs back in as one ordered PDF.
Organise
Rename a folder to a rule, preview every change before it happens, and catch the same document filed twice under two names.
Assemble
Build a numbered bundle with a contents page, stamp sequential page references across the whole set, and place a signature or stamp image.
Sample
Draw a selection anyone can re-perform and get the identical result, with a certificate stating the algorithm and the population it came from.
Every “PDF to Excel” button is a confident guess. This one shows its working.
A PDF does not record that it contains a table. It records glyphs at coordinates, and a table is only the observation that many of them start at the same few positions, line after line. So Oxofolio measures the page, shows you what it measured, and writes nothing until you have looked.
- The signals behind the suggestion are shown next to it, and the grid it found is previewed
- The preview and the conversion share one piece of geometry, so they cannot disagree
007stays an account number and(1,240.75)stays negative money — the number rules are deliberately conservative- The workbook carries a Source sheet naming the PDF it came from and what was assumed
- A page with no text layer is refused and routed to OCR, rather than converted into a blank document
What it will get wrong, stated up front
A form, a two-column report and a scan with a poor OCR layer all look like tables to any geometry-based reader, including this one. You are told that before you convert, not after.
Word conversion rebuilds what Word can hold — paragraphs, headings, bold and italic, tables, images, page size and margins. What it does not reconstruct is listed rather than discovered: exact line breaks, hyphenation, columns of prose, footnotes and running heads.
An editable document that reads correctly — not a replica of the page.
Know exactly what happened to every file.
Every operation is written to a processing log: what was done, when, on which machine, with the SHA-256 fingerprint of every file that went in and every file that came out.
- Prove a document is the one you started with
- Seal the file at the report date, and see exactly what was added, removed or altered afterwards
- Show what was processed, and when, without keeping notes
- Passwords never appear in the log — deliberately
Nothing changes by accident.
Unlock, compress, combine, convert, redact, encrypt, split, stamp, OCR, mark up — every one of them writes a new file beside the source and leaves the source exactly where you put it.
- One feature writes in place on purpose: light edits to a spreadsheet. It is off by default
- Before the first such write, the file as it arrived is copied to
_originals/and hashed — and never refreshed, so a later edit cannot quietly become the original - The change goes into the processing log, like every other operation
- Results are written beside the source, not into a hidden app folder
- No thumbnail cache — a rendered page of a bank statement is the bank statement
Rolling it out across a firm
Bought, installed and supported like the rest of your software.
Installs without admin rights
A per-user install with no system services. The deployment notes list everything it writes, and where.
One organisation, many seats
Firm licences run from six seats to 250, each verified offline. Replace a computer and the seat moves with you.
Invoiced the way you buy
Dollar purchases go through Dodo Payments as merchant of record, which collects any VAT or sales tax due where you are. Rupee purchases carry a GST invoice.
Support with a ticket reference
A person reads every ticket and replies, usually within a working day — and never needs to see your files to do it.
Outlives its supplier
The licence on each machine was never checked against anything of ours, so if this company disappeared tomorrow, the app keeps working.
Licensing a whole firm?
Seat counts, invoicing, your own questionnaire — tell us what procurement needs.
Talk to us →
Worldwide, with a local pack for India
Almost none of this product is country-specific — and we say which part is.
The document engine and the evidence layer do not know what country they are in. The standards behind the evidence are international: ISA 530, ISA 230, ISQM 1, GDPR Articles 30 and 32, NIST SP 800-88.
Works the same anywhere
Every tool on this page, the whole evidence layer, and personal-data detection for IBAN, e-mail and labelled account numbers. Dates and decimal separators are a per-folder setting — India, UK, EU, US or ISO — chosen rather than guessed.
No residency question at all
There is no server to host in your region, no sub-processor list and no transfer mechanism, because there is no transfer. The document work never crosses a border for a data-localisation rule to apply to.
A local pack for India
Aadhaar, PAN, GSTIN, IFSC and Indian mobile detection, six statutory retention presets, and a check for a folder that has picked up a second client’s papers.
The questions people ask first.
Can Oxofolio open a PDF if I have lost the password?
No, and it never will. Oxofolio applies passwords you already have — across a whole folder at once, so you are not typing the same one forty times. There is no brute force and no guessing in the product, by design.
Does it work without an internet connection?
Entirely. Pull the network cable and every tool still works, because none of them ever needed it — including the licence check.
What happens to my files?
They stay in the folder you chose. Nothing is uploaded, nothing is copied to a cloud store, and the app keeps no document store or thumbnail cache of its own. The only copies it makes sit where you can see them: the files an operation produces, beside the source, and the untouched original saved to _originals/ before a spreadsheet light edit.
Do I need an account?
No. You buy a licence key and install it in the app. There is no sign-up, no profile and nothing to log in to.
Can it edit Word and Excel files?
It reads them. Word is never edited. Excel has one opt-in exception, off by default: light edits to a spreadsheet, made only after the file as it arrived is copied to _originals/ and hashed. Beyond that nothing in the viewers writes — a total this app calculated, sitting beside totals your client calculated, would be indistinguishable from theirs and wrong. The formula bar shows what was read out of the file, never a value we computed.
Is it only for audit and accounting firms?
That is who it is built for, and the sampling, file-assembly and retention features assume that work. Everything else — the viewers, unlock, redaction, conversion, the processing log — is useful to anyone who cannot upload the documents they were asked to protect.
Fourteen days, everything unlocked
Keep client documents on the machine they arrived on.
Every tool for 14 days — no sign-up, no watermarks, no export limits. Nothing you produce stops working when the trial ends.