Edit documents together, with a fullaudit trail
Edit compliance documents as a team, in your browser and in real time. Each change is logged. Your data never leaves your own servers.
What you get
- Edit together in real time
- Versions
- Audit trail
- Word, Excel and PowerPoint files
- On-premise
- Shared workspaces
Features at a glance
An online office, built right into SecTepe.Core. It runs on your own servers.
Real-time co-editing
Several users edit a document at the same time. They see where the others are typing and can comment and chat.
Document versions
Each save becomes a new version. You can compare versions, restore an old one and manage releases.
An audit trail for every edit
Each edit is logged with the user, the time and what changed. The log cannot be altered. That makes it good audit evidence, also under GxP rules for pharma and labs.
Works with Microsoft Office
The editor opens Word, Excel and PowerPoint files and saves them in the same format. Comments and tracked changes work. Controlled documents download as PDF.
Templates & Macros
Company templates for policies, reports and audit files. Macros work too.
Permissions
Set who may view, comment or edit, for each document, folder and user group. If you like, only for a set time.
Your benefits
Teams need to edit policies, audit files and risk reports together. But no data should leak to outside cloud services. With the built-in online office, it all stays inside your own network.
- Runs fully on your own servers
- GDPR-compliant editing, with no lock-in to Microsoft 365 or Google Docs
- A full audit trail for each change
- Opens and saves Word, Excel and PowerPoint files
- Linked directly to your ISMS
Use cases
Policy co-authoring
Legal, IT and management edit policies at the same time. A sign-off workflow is built in.
Audit report collaboration
Auditors and your own teams record findings in the same document at the same time. No one overwrites the work of others, and the history holds up in any audit.
Risk analyses
Teams edit risk spreadsheets together. Fixed templates with macros speed this up. Each version is kept.
Tender responses
Sales and compliance teams answer requests for proposals (RFPs) together. Your data never leaves your network.
How co-editing works in practice
SecTepe.Core runs the online office in its own container. Your browser never talks to it directly. All editor traffic passes through Core. Core limits the number of requests and ties each document to your tenant.
What happens when you save
- Core signs every editor session. If signing is switched off or the key is too short, Core will not start.
- Each save becomes a new minor version, for example 1.2 after 1.1. If nothing has changed, Core skips the save.
- The new version starts as a draft. A malware scan checks it before anyone can download or preview it.
- The editor opens Word, Excel and PowerPoint files, open document formats, CSV and plain text. Core converts Markdown policies to Word first. On request, it places them in your company Word template.
Controlled documents
For policies and checklists, Core offers full document control. You start from a template as draft 0.1. Only you can see it. When you submit it, you name an owner. The owner can hand the review to a colleague.
The review runs in the online office with tracked changes. The owner either returns the draft with notes or approves it as version 1.0. Then all active users get a task to confirm they have read it. The default deadline is 14 days.
Core writes a managed header and footer into the file. It holds the document ID, version, owner, classification and page numbers. Later versions start at 1.1. Version 1.0 stays valid until version 2.0 is approved.
Operation and data sovereignty
Both the container package and the Kubernetes package include the online office. On Kubernetes it gets its own database, message queue and cache. Edited files go to your file storage, in a folder for your tenant. The built-in online office is the default. A tenant admin can switch to Microsoft 365 or Google Workspace in the settings.
Common questions
Can I download the original Word file? Not for controlled documents. The document manager hands them out as PDF only. The file name carries the title, document ID and version.
Who sees a draft? Only the person who created it. During review, the owner and the delegated reviewer see it too. Once approved, everyone in the tenant can read it.
Can I compare versions? Yes. Owners and reviewers see the version history. They can compare two versions of a controlled document.
Ready to co-edit on your own servers?
Book a personal demo. See how your team edits documents together, all on your own servers.
How we work with you
We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.
1. Free initial conversation
We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.
2. Current state review
We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.
3. Delivery with a dedicated lead
An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.
4. Running and reviewing
After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.
Common questions
We hear these questions most often in a first call. For anything else, write to hello@sectepe.de or give us a call.
- How do we start working with SecTepe?
- Every project starts with a free first call. Then you get an offer with scope, timeline and result. If you like, we start small with a pilot. That way you get to know us before the real work starts.
- What company sizes and sectors do you support?
- We work for small and mid-sized firms, for parts of large groups and for operators of critical infrastructure (KRITIS). Often that means industry, trades, health, banks, energy and public bodies. Our focus is mid-sized firms in Germany, Austria and Switzerland.
- Do you work on site, remotely or hybrid?
- Both. Reviews, advice and most services run remotely from German data centers. For workshops, training and emergencies we come to you, mainly in North Rhine-Westphalia, the Rhineland and the Ruhr area. We travel further when needed.
- Which standards and regulations do you cover?
- We work to ISO 27001:2022, BSI IT-Grundschutz, TISAX, B3S KRITIS, NIS2 and DORA, plus sector-specific rules. Our methods build on known frameworks such as NIST CSF, MITRE ATT&CK, OWASP and OSSTMM. We combine them to fit each project.
- How do you protect the confidentiality of my data?
- By contract and by technology. Before every project, both sides sign a non-disclosure agreement. Your data stays in German data centers. Every access needs a second login factor and is checked one by one. Our whole team is bound to secrecy by contract and under the GDPR.