Passwords in email threads
Sent once, stored forever — in inboxes, archives and backups, readable by anyone with access to that mailbox.
Now in early access
Share once. Gone for good.
Send passwords, files and document requests to your clients through a one-time link — under your own brand, hosted in the EU, every step logged.
Early access for EU companies. We only email you about Turvio.
Designed for teams that answer to
- Hosted in the EU
- GDPR
- NIS2
- ISO 27001
- DORA
The problem
Your inbox is not a vault.
Attachments out of control
A PDF has no expiry date. It gets forwarded, downloaded and printed. You lose control the moment you hit send.
No proof of who opened what
Did the client actually receive that document? Without a log there is no answer — and no evidence for your auditor.
How it works
Three steps. Nothing to install.
-
01
Free or company SSO
You start the exchange
On Free, with your e-mail and a passkey. On Pro, your employees sign in with the company Microsoft account.
-
02
No account for them
The recipient gets a link
By e-mail, with nothing to install. Pro uses your branding and can add an SMS code. Free shows Turvio branding and does not send SMS.
-
03
Audit log
Opened, then gone
After the allowed number of opens or the expiry date, the content and its encryption key are destroyed. Every step stays in the audit log.
Modules
One platform for every sensitive exchange.
One-time secret
Passwords, codes and short confidential texts that can be read once — or as often as you allow — and then disappear.
One-time file
Send documents with an expiry date and a limited number of downloads. Encrypted before they are stored.
Upload request
Ask a client to send you documents through a secure link, straight into your environment instead of an e-mail attachment.
Security & data
Built for teams that have to prove it.
Hosted in the EU
Turvio runs in EU data centres. Your data does not leave European jurisdiction.
Your data, your cloud
On Pro and Enterprise, files are stored in your own Azure or AWS storage — encrypted before they arrive.
A key per delivery
Every delivery gets its own AES-256-GCM key. Recipient e-mail addresses and phone numbers are encrypted in the database too.
Crypto-shredding
When a delivery is deleted, its key is destroyed with it — even backups of the files become unreadable.
A known sender
On Pro, only employees signed in with Microsoft Entra ID can send. On Free, the sender verifies an e-mail address first.
Complete audit log
Who sent what to whom, when it was opened and when it was deleted. Exportable on Pro and Enterprise.
White-label
Your brand. Not ours.
On Pro, recipients see your logo, colours and backgrounds. Your own domain is coming soon. Free always shows Turvio branding.
A
Acme Finance
Secure message from Acme Finance
You have received a secure document
This link can only be opened once. After that, the content is permanently deleted.
Open securely
Expires in 23 h 47 min
Secured by Turvio
Pricing
Start free. Pro when the company needs it.
Free is for one person. Pro is priced per employee who sends. Recipients are always free.
Free
€0
For one person who wants to try secure one-time sharing.
1 person
- One-time secret
- 2 GB storage, 20 deliveries per day, 3 recipients, valid up to 72 hours
- Turvio branding
- E-mail verification
- No SMS
Pro
14 per user / month
For companies that want their own cloud, branding and SSO.
Minimum 3 users
- One-time secrets and files
- Upload requests Coming soon
- SSO with Microsoft Entra ID
- Your own storage: Azure or AWS
- Your own domain Coming soon
- Full branding: backgrounds, e-mail templates, SMS sender name
- SMS bundle per user (for example 25 / month) and top-ups
- Audit log: 1 year + export
- Company policies per flow
- API access Coming soon
- Priority support
Enterprise
Custom
For regulated organisations with specific security, governance or volume needs.
From 25 users
- Everything in Pro
- On-premise NAS storage, multiple locations
- Your own encryption keys (BYOK / HSM)
- Malware scanning of uploads
- Departments and multiple brands
- Four-eyes approval
- SCIM provisioning and other identity providers
- SIEM export and compliance reports
- Webhooks
- SLA, dedicated contact and your own DPA
Prices excl. VAT. Free allowances are the figures published here. SMS top-ups are available on Pro and Enterprise.
FAQ
Common questions.
Where is my data stored?
On Free, encrypted in an EU data centre run by Turvio. On Pro and Enterprise, in your own Azure or AWS storage (Enterprise also supports on-premise NAS). Files are always encrypted before they are stored.
Do my clients need an account?
No. Recipients get a link by e-mail. On Pro, that link can be protected with an SMS code. They never need an account or an app, and they are never counted as users.
Who can send something?
On Free, you, after you verify your e-mail address. On Pro, your employees, signed in with the company Microsoft account. Every exchange is started by a known sender.
Which identity providers are supported?
Free uses e-mail with a passkey or a magic link, not SSO. Pro uses Microsoft Entra ID. Other identity providers and SCIM provisioning are on Enterprise.
What happens after a link has been opened?
Once the allowed number of opens is reached or the link expires, the content and its encryption key are destroyed. The audit log keeps a record of what happened.
Can I use my own domain?
Free uses the shared Turvio address. Your own domain is coming on Pro and is not available yet.
Ready to stop sending passwords by e-mail?
Join the early-access list and be among the first companies to use Turvio.
Early access for EU companies. We only email you about Turvio.