The exact document
A run identifies the document version, package fingerprint, and source hash selected when it was accepted.
A critical document system
should not ask for
blind trust.
dokus sits between an approved source, application data, and the copy someone receives. Before you put it there, you should know what it records, what you can take out, and what the public alpha does not promise.
Recorded originControlled downloadsExportable auditStated limits
01 / RECORDED ORIGINStart with the evidence
Start with the evidence
behind one output.
A successful render is not enough. dokus keeps the origin needed to explain the result after the request is over.
The exact behavior
The saved blueprint revision or inline blueprint digest and the compiled render plan stay with the run.
The exact request
The accepted input digest and requested outputs remain part of the run record instead of disappearing after rendering.
The exact result
Completed outputs include their own digest and the compiler, engine, and font identities used to create them.
02 / ACCESS & AUDITAccess is deliberate.
Access is deliberate.
Evidence can leave with you.
Reading a run never creates a public download link. Your server explicitly issues a short-lived output link and can revoke it. Completed outputs include a digest. Tenant audit events can be exported as a digest-checked NDJSON file.
YOUR SERVERExplicit access. Verifiable evidence.
01CONTROLLED DOWNLOADS
Finished documents
Download access is finite, policy-bounded, revision-owned, and audited. A link is issued for a specific output instead of appearing on every read.
02EXPORTABLE AUDIT
Audit evidence
Query tenant events in the API or request an immutable-watermark export whose downloaded bytes can be checked against its hash.
03 / DATA LIFECYCLEData has a lifecycle.
Data has a lifecycle.
Each part has a surface.
Retention, holds, erasure, and offboarding are implemented, but they do not all live in the same place. Read this before assuming a self-service control exists.
IN YOUR TENANT APIControls your server
Controls your server
can call today
- A retention policy with separate periods for inputs, outputs, and evidence, read and updated per tenant.
- Legal holds placed on a run or a document, and released later.
- Erasure requests for the customer data behind a run.
- Retirement of a document that should no longer be used.
OPERATOR CONTROL PLANEActions dokus
Actions dokus
performs for you
- Tenant offboarding runs on a separate operator server with its own credentials. It is not a self-service button.
- Customer-data purges after offboarding are internal jobs whose effect is recorded on every affected row.
NOT PROMISEDCommitments that
Commitments that
do not exist yet
- Data residency or region selection.
- Backup and restore objectives.
- A complete account-portability guarantee.
04 / THE PUBLIC ALPHAClear boundaries.
Clear boundaries.
No small print.
These are not footnotes. They are the limits you should use when deciding where dokus belongs today.
Production terms
dokus is a public alpha. A production SLA, support policy, and stable production licence are not available yet.
Pricing
The public alpha is free to use, and there is no paid plan today. Pricing will be published before anyone incurs paid usage.
Document compatibility
Support is tested feature by feature. dokus does not promise that every Microsoft Word feature will render, so evaluation should include your real documents.
Data location
No public data-residency commitment has been published. Do not assume a region or regulatory boundary that dokus has not stated.
Account exit
Finished outputs and audit evidence can be exported today. A complete account-portability guarantee has not been published.
Browser editing
The current browser component displays and selects documents. Editing and saving are in development for a separate package and are not available now.
Test the claim with a document
your product actually depends on.
The alpha is useful for evaluation. It should earn a larger role with evidence, not promises.
Get access