Today we're announcing a partnership we care a lot about: Vault Desk is teaming up with CRMflow.io, the platform behind DentalPro — a practice management app that lets dental clinics run their entire day from a single screen. Together, we're putting private-by-design file storage in the hands of the people who need it most: healthcare professionals.
Vault Desk started with one stubborn idea — that a drive should be readable by you and no one else, not even us. Nowhere does that principle matter more than in a clinic, where every file on the desk is a piece of someone's medical history.
Patient data isn't ordinary data. It's health data — the most protected category under GDPR — and it deserves storage where a breach yields nothing readable.
Meet DentalPro
DentalPro by CRMflow.io is dental practice management done the modern way: appointment scheduling with reminders, an interactive FDI dental chart with per-tooth history, electronic patient files, payment tracking, and staff accounts with controlled access — all in the browser, with nothing to install. Solo practitioners, orthodontists, and multi-chair clinics use it to replace the paper diary and the shelf of folders behind the reception desk.
That's exactly the kind of operator Vault Desk was built for: a small team handling deeply sensitive material every day, without a dedicated security department to lean on. A dental practice doesn't want to think about cryptography. It wants the X-rays, consent forms, and treatment plans to be safe — provably, not promisedly.
A clinic's files are a special case
Think about what actually sits in a dental practice's storage: panoramic X-rays and CBCT scans, medical histories and allergy lists, treatment plans, signed consent forms, lab orders, referral letters, invoices with patient names on them. Under GDPR, that's special-category health data — the kind that triggers the highest obligations and the harshest penalties when it leaks.
Most cloud drives protect this data with encryption keys the provider also holds. That means a breach at the provider, a misconfigured bucket, or a curious insider can expose a readable copy of every patient's file. Zero-knowledge storage removes that failure mode at the root: files are encrypted on the clinic's own device before they ever reach a server, so there is no readable copy to leak, subpoena, scan, or sell.
What the partnership brings
- Encrypted storage alongside DentalPro — practices running their day in DentalPro can keep the documents that matter (X-rays, scans, consent forms, lab reports) in a Vault Desk vault that only the clinic can read.
- Keys that stay in the practice — encryption happens on the clinic's devices; neither Vault Desk nor anyone upstream can open a patient file.
- Sharing that respects the referral chain — send a scan to a specialist or a lab as a sealed share, readable by the recipient and no one in between.
- GDPR posture by architecture — when the provider can't read the data, whole classes of breach risk and processor headache simply disappear.
- Room to grow together — this is a starting point, with deeper integration between DentalPro and Vault Desk on the shared roadmap.
Healthcare is where privacy stops being abstract
For a lot of businesses, privacy is a value. For a clinic, it's the law, the license, and the patient's trust all at once. Dentistry in particular sits in an awkward spot: practices are small enough to have no IT staff, yet regulated like hospitals. Tools have to close that gap by design — which is what both DentalPro and Vault Desk set out to do, each on its own side of the desk.
The same zero-knowledge core, chairside
Vault Desk works the same for a dental clinic as for anyone else: files are encrypted with XChaCha20-Poly1305 before they leave the browser, passwords never reach our servers thanks to OPAQUE, and shared files are sealed to the recipient and verified against a tamper-evident Key Transparency log. Read how it works →
This is the beginning
Partnering with CRMflow.io is another step in a bigger plan: making encrypted, zero-knowledge storage the obvious choice for any business that handles something worth protecting — and few things are more worth protecting than a patient's file. We'll keep shipping, keep partnering, and keep proving — not just promising — that your files are yours alone.
If you run a dental practice and found us through DentalPro: welcome. Setting up a vault takes under a minute, and the keys are yours from the very first file.