Filarr Drop
An encrypted upload form, inside your website.
Your clients send you their documents from your website, without creating an account. Files and answers are encrypted in their browser, to your form’s key, before they leave. They arrive in your Filarr, filed.
In the web app, under Collection › Website forms. The desktop app follows with its next version.
Included in every plan, the free one too, with quotas specific to each plan.
In three steps
From template to website.
1
Create the form
In the app, start from a template. Choose the fields, the accepted file types and the folder where submissions are filed.
2
Publish it
Paste a short snippet into your website, or share its link and QR code: it also has its own page on drop.filarr.eu.
3
Receive, filed
Each submission lands in the form’s folder, or in a subfolder named after a field, such as the client file number. Your clients leave with a receipt code.
What protects a submission.
Encrypted before it leaves
Files and answers are encrypted in the sender’s browser, with the form’s public key. Its private key only leaves your device encrypted: our servers store nothing but ciphertext.
A pinned key
The snippet you paste into your website carries the form’s key. If our servers handed out a different one, the form would refuse to load and say “This form has changed”.
Only on your websites
The embedded form only displays on the websites you have allowed. Anywhere else, the browser blocks it.
Also worth knowing: the form’s code is served by Filarr, from drop.filarr.eu.
What the server sees.
The same table as in the app’s help.
| the server sees | it never sees | |
|---|---|---|
| the form | its definition (title, labels, help texts, options: public, put no secrets there), its public key, its short address, the allowed websites, its status | the private key |
| each submission | date, size of each file, number of files and how they group into one submission, the form, the origin website as declared by the frame, a fingerprint of the sender’s IP address kept with the deposit until it is deleted (it is used to accept the end of a submission only from the device that started it) | the answers, the names and contents of the files, the case reference, the sender’s name |
| at the sender’s request | the email address to send the receipt to: it is not end-to-end encrypted | — |
Three ways to publish it.
In your website
A component to paste into any page. It adjusts to the form’s height and tells your page when a submission is made.
Its own page
Each form has its own page on drop.filarr.eu, and can have a short address, such as drop.filarr.eu/morel-partners.
A link, a QR code
For an email signature, a letter or the front desk. The link carries the form’s key, like the snippet does.
A WordPress plugin is on its way.
Six templates to start from.
The app’s templates, as they open in the editor. Every field can be edited, added or removed.
Accounting documents
Name, file number, subject and files; filed per client.
- Name or companytext · required
- Client file numbertext · files into a subfolder
- These documents are aboutselect · required
- Filesfiles · required
- A note for the firmtextarea
Rental application
Only the documents French law allows (decree 2015-1437), for the applicant and guarantors.
- Applicant’s full nametext · required · files into a subfolder
- Email addressemail · required
- Phonetel
- Property applied fortext
- These documents are forselect · required
- Supporting documentsfiles · required
Job application
CV and cover letter, filed per position. Deleting rejected applications remains your job.
- Full nametext · required
- Email addressemail · required
- Phonetel
- Positiontext · required · files into a subfolder
- CV and cover letterfiles · required
- A note for ustextarea
Client identification
Identity, proof of address and beneficial owners, filed per client.
- Name or company nametext · required · files into a subfolder
- You areselect · required
- Email addressemail · required
- Beneficial ownerstextarea
- Supporting documentsfiles · required
Insurance claim
Date, type, account, photos, quote and report; filed per policy.
- Policyholder’s nametext · required
- Policy numbertext · files into a subfolder
- Date of the incidentdate · required
- Type of claimselect · required
- What happenedtextarea · required
- Photos and documentsfiles · required
- Email addressemail
Contact with attachments
Name, email, message and files, nothing more.
- Nametext · required
- Email addressemail · required
- Subjecttext
- Messagetextarea · required
- Attachmentsfiles
For the person sending.
No account
They fill in the form and send it, from a computer or a phone.
A photo, from the phone
A button opens the phone’s camera. On the hosted page, they can also scan a multi-page document into a single PDF.
A receipt code
At the end, a code formatted XXXX-XXXX-XXXX identifies their submission. They can download a PDF receipt signed by the server and, if you turn it on, get the code by email.
Frequently asked questions
Do my clients need to create an account?
How much does it cost?
Do your servers see file names?
What if a server handed out a different key?
How long does a submission stay on your servers?
How do I find a submission from its receipt code?
My website runs on WordPress: how do I add it?
Your first form, in a few minutes.
Start from a template in the web app, then paste the snippet into your website.