A home for your notes. A connection between your devices. All on infrastructure you control. Granular folder permissions, zero-loss conflict safety, private local RAG, and instant mobile pairing.
The same vault opens as a full Markdown workspace or a live map of the notes and links you can access.
Real product capture
A complete writing workspace.Formatting tools, document outline, minimap, split preview, sharing, versions, and save state.The same vault, mapped.Search, zoom, inspect links, and open any accessible note directly in the editor.
02 / Full product capabilities
Four working surfaces. One vault. Built for power.
Every tool your notes need to stay organized, connected, safe, and private — with large visuals and straight-to-the-point control.
Available now · Fleet Dashboard
See the vault at a glance.
Monitor your entire vault ecosystem from a single pane of glass. Track storage usage, note counts, recent sync events, fleet revision status, and verify that all connected laptops and phones are synchronized.
Live health scoring: Real-time audit of vault integrity, unverified changes, and storage limits.
Fleet telemetry: Inspect device sync times, client versions, and connection states across platforms.
Multi-vault switcher: Manage personal, work, and client vaults under one authenticated roof.
Never lose flow when you are away from your main machine. Synkk includes a full in-browser Markdown editor with live split preview, interactive document outline, minimap navigation, reading metrics, and keyboard shortcuts.
Live split preview: GitHub-flavored Markdown rendered instantaneously side-by-side with your source.
Document outline & minimap: Jump through long-form notes with automated heading tree parsing.
Version-aware saves: Edit safely with revision checks that prevent silent overwrites.
Discover how your ideas connect across thousands of notes. Synkk constructs an interactive 2D physics-based force graph of all your [[wikilinks]] and tags. Inspect clusters, search for hidden connections, filter orphan notes, and click any node to jump straight into editing.
Force-directed physics map: Smooth canvas simulation of relationships and note links.
Interactive inspection: Zoom, drag, and search nodes with instant cluster highlights.
Direct jump to editor: Click any node to open the underlying Markdown note immediately.
Traditional sync forces you into all-or-nothing sharing. Synkk gives you surgical control with a granular per-path permission matrix. Keep Private/** notes hidden, share Client/** as read-only, and collaborate on Projects/** with full read-write access.
Per-member path rules: Assign Read, Write, or Hidden access per team member.
Inheritance & overrides: Subdirectories inherit parent rules with specific exceptions.
Zero leaks: Hidden paths are stripped from manifests before reaching untrusted devices.
Other sync tools risk catastrophic data loss when mass deletions or stale sync collisions happen. Synkk includes Safety Shield: a deterministic guard that halts any sync attempting to delete more than 10% of your notes until you confirm it.
10% Deletion threshold guard: Aborts destructive mass wipes with a safe one-time manual override.
Pre-mutation snapshots: Files are backed up locally to .synkk/snapshots/ before remote overwrites.
Conflict fork preservation: Concurrent edits fork to .sync-conflict-[timestamp].md instead of clobbering.
Cryptographic fingerprinting: Every revision is verified using full SHA-256 content hashes.
Deploy Synkk with a single Docker command using embedded high-performance SQLite WAL. Retain 100% data ownership on your own infrastructure. Every device authenticates using scoped, revocable API tokens. If a laptop or phone is lost or stolen, administrators can remotely wipe the device token with one click.
Single Docker container: Production-ready with Nginx, PHP 8.4, and SQLite WAL out of the box.
Instant remote token wipe: Immediately sever and invalidate stolen device tokens.
Zero telemetry: No tracking, no third-party analytics, and no external data exposure.
🔒 Remote Device Wipe
HTTP 410 auto-clears local tokens instantly
Visual Reconciliation · Zero Corrupted Markdown
Interactive Conflict Sandbox
Never lose a paragraph to merge collisions.
No more broken YAML frontmatter or cryptic <<<<<<< HEAD delimiters. When teammates edit the same document simultaneously, Synkk isolates changes into an interactive 3-way visual diff buffer with CodeMirror 6 live carets.
3-Way visual diffing: Side-by-side comparison of Canonical Server, Incoming, and Reconciled state.
1-Click hunk commits: Take Mine, Take Theirs, or Keep Both with deterministic commit checks.
Each change passes through a visible chain of checks before it becomes part of the shared vault.
01
01
Prepare the change
Edit in Obsidian or the web workspace. Your vault remains portable files and folders.
Local-first authoring
02
02
Check the boundary
Synkk verifies the device token and path rule before accepting a note or asset.
Scoped access
03
03
Fingerprint the file
A SHA-256 hash and base revision make the accepted state inspectable and stale writes visible.
Integrity recorded
04
04
Deliver to devices
Trusted devices pull the approved change on startup, schedule, or manual request.
Predictable delivery
Mobile Storage Solved · 50GB Vaults on 64GB Phones
Ghost File Dehydration
Sync massive archives without filling your phone.
Large team vaults packed with PDFs, audio recordings, and visual canvas boards shouldn't overwhelm your mobile storage. Synkk replaces heavy attachments with lightweight ghost stubs and hydrates full binary content on demand in under 0.4 seconds upon tap.
Lightweight ghost stubs: Replaces heavy attachments with 180-byte metadata placeholders.
Sub-second hydration: Tap any note or trigger ribbon command to pull full content via API.
Zero broken links: Preserves wikilinks, file names, and frontmatter across the entire vault.
👻 This file is currently dehydrated.48.2 MB Remote
Local stub: 184 bytes. Click "Hydrate Active File" to load complete content.
>POST /api/v1/vaults/team-vault/files/hydrate
Streamed 48.2 MB · Hydrated and decrypted in 380ms
# Phone storage saved: 48.28 MB preserved on local flash memory
04 / Access and recovery
Keep access narrow. Keep every version.
Synkk scopes vault paths by member, fingerprints stored content, and keeps note versions available for restore.
CONTENT INTEGRITYSHA-256
Every accepted upload gets a fingerprint.
Synkk computes a content checksum before storing the current file and its version record.
CONTENT HASHf2a8c1d7…9b6e
Recorded with the version
PATH RULESPer member
Share a folder, not the whole vault.
00-Inbox/**Read + write
Client/**Read only
Private/**Hidden
VERSION HISTORYRecoverable
Restore a note without learning Git.
v78 · currentVerified and available
v77 · 42mOne-click restore
v76 · 2hContent retained
Zero Cloud Leakage · Local Ollama & Graph Traversal
Vault Copilot & Graph RAG
Ask your vault anything. Keep thoughts confidential.
Turn your personal knowledge base into an autonomous research assistant. Query your vault with deterministic 128-dimension hypersphere embeddings or local Ollama—traversing bidirectional wikilinks with verified citations and zero third-party API exposure.
Graph-augmented retrieval: Traverses connected notes ([[wikilinks]]) to pull surrounding context.
Verified fact citations: Every answer links to the exact note name, section, and line numbers.
100% Offline embeddings: Sublinear TF-IDF character hashing works with zero API costs.
Vault Copilot: Synkk enforces an automatic 10% mass deletion abort guard. If more than 10% of notes are deleted in a single sync batch, synchronization halts immediately until an admin issues a cryptographic override. All pre-sync notes are saved to immutable local snapshots.
# Zero external requests: 100% processed locally on Apple Silicon / CUDA
05 / The Sovereign Standard
What makes Synkk better than existing Obsidian sync tools?
Most sync alternatives force a painful compromise: fragile DIY git setups, complex CouchDB database maintenance, or closed proprietary cloud silos with recurring monthly seat taxes. Synkk gives your team a local-first brain with path-level security, secret leak prevention, and 100% data sovereignty on hardware you own.
Architecture & Security
Core capabilities
Team Standard
Synkk
Local-First Server
Official Obsidian Sync
Proprietary Cloud
Obsidian Git
Community Plugin
Remotely Save (S3/WebDAV)
Object Storage
Self-Hosted LiveSync
CouchDB Replication
100% Self-Hosted
Complete data sovereignty. Run on private VPS, Docker, or bare metal.
100% Local-FirstPrivate SQLite WAL engine. Your data never touches third-party clouds.
NoHosted on proprietary Obsidian cloud infrastructure.
PartialRequires GitHub, GitLab, or self-maintained Git server.
PartialRelies on commercial S3 (AWS/Cloudflare) or custom WebDAV.
YesSelf-hosted Apache CouchDB or IBM Cloudant database.
Path-Level ACLs
Granular team directory rules. Share specific folders while keeping private notes hidden.
Native Path ACLsPer-member glob rules: Read-write, Read-only, or Hidden boundaries.
NoneAll-or-nothing vault sync. Every collaborator has full access to all files.
NoneGit repository permissions are repo-wide. No folder-level masking.
NoneClient receives full bucket contents without user permission filters.
NoneCouchDB replicates entire database documents with no folder boundaries.
Data Loss Prevention (DLP)
Automatic secret & credential scanning before notes leave local storage.
In-App DLP ShieldDetects AWS, OpenAI, Stripe, and private keys. Warns and blocks leaks locally.
NoTransmits any text without inspection. Leaked secrets sync to cloud.
NoNo pre-commit hook in plugin. Secrets are committed to Git history.
NoBlind file upload to remote S3 bucket.
NoDirect replication to CouchDB without secret analysis.
Atomic Safety Shield
Protection against accidental bulk deletion from rogue scripts or misconfigured clients.
10% Abort GuardAutomatically halts sync if >10% of notes are queued for deletion. Vault preserved.
NoDeletions immediately replicate across all devices.
ManualGit can revert commits, but requires terminal commands and recovery know-how.
NoDeletions immediately remove files from S3 bucket.
NoCouchDB doc deletions replicate immediately to all clients.
Conflict Handling
Safety when multiple teammates edit the same document simultaneously.
Safe ForkingCreates non-destructive *.sync-conflict-*.md copies. Zero overwritten work.
Last-Write-WinsSilent file overwrite; requires manual version history recovery.
Broken MarkersRaw Git merge conflicts inject <<<<<<< HEAD into markdown.
No E2EERaw Markdown and secrets pushed in plaintext to Git servers.
Optional PluginOptional client-side password encryption before upload.
OptionalEncrypted string storage in CouchDB with complex passphrase setup.
Cost for a Team of 15
3-year total software cost for a 15-person engineering or research group.
$0 Free / $79 LTD100% free open-source, or $79 lifetime team server (up to 10 users). Zero per-seat tax.
$4,320+$8/seat/mo ($96/yr/seat) × 15 seats × 3 years recurring bill.
Free (High Dev Time)Hidden cost in engineer time debugging broken merge commits.
S3 API CostsRecurring monthly S3 PUT/GET request fees and bandwidth charges.
VPS OverheadRequires persistent CouchDB clustering and database maintenance.
06 / The Moonshot Architecture
The Synkk Moonshot Engine
Beyond simple file synchronization. Four breakthrough systems engineered to eliminate sync friction, prevent data loss, scale team collaboration, and guarantee uncompromising data sovereignty.
01REAL-TIME MULTIPLAYER CRDT (Yjs)
LIVE IN V1.0
Two users typing in the exact same .md note simultaneously without Git merge hell.
Traditional sync engines force last-write-wins overwrites or leave ugly Git conflict markers that corrupt your Markdown. Synkk's CRDT engine integrates Yjs binary state vectors to merge concurrent keystrokes deterministically at the sub-character level.
Zero Merge Hell: Eliminates <<<<<<< HEAD conflict markers forever.
Real-Time Remote Cursors: Live multi-caret awareness across desktop, mobile, and web.
Offline-First Resilience: Edit without internet; changes converge smoothly upon reconnect.
collaborative-session.md · 2 peers active
Yjs Active
1# Q4 Strategic Product Priorities
2We are shipping the sovereign team brain engine.
3- Alice: Real-time conflict-free CRDT sync
4- Bob: Instant 2-second QR mobile pairing
5State vector delta: 0x4a9f...b27e [synced]
02INSTANT ZERO-CONFIG MOBILE ONBOARDING
LIVE IN V1.0
Scan a single QR code on the Synkk web dashboard to link iOS/Android in 2 seconds.
No more tedious typing of server URLs, port numbers, long device tokens, or complex base64 keys on touchscreen keyboards. Synkk generates a secure, instant-pairing QR code on your dashboard that auto-provisions iOS and Android devices in one camera scan.
2-Second Pairing: Auto-configures Server API URL, Device Token, and Vault slug.
Cross-Platform Support: One-tap connect for iPhone, iPad, and Android devices.
Cryptographic Safety: Scoped, revocable device tokens with remote wipe capability.
Paired in 1.8s
iOS & Android · Synkk Instant Pairing
03AGENTIC KNOWLEDGE GRAPH & RAG SERVER
FUTURE HORIZON
Self-hosted vector embeddings & local LLM chat answering questions from your vault.
Transform your static notes into an active reasoning engine. Synkk pairs your 2D [[wikilink]] knowledge graph with local vector embeddings. Run private LLM queries with Ollama or vLLM directly over your notes without exposing proprietary knowledge to third-party AI APIs.
Synkk enforces path-level ACLs per member and verifies every revision with SHA-256 checksums before accepting writes. Confidential secrets are caught by in-app DLP scanning.
04ZERO-KNOWLEDGE TEAM E2EE (CLIENT-SIDE ENCRYPTION)
LIVE IN V1.0
Server stores encrypted blobs; web viewer decrypts via WebAssembly/WebCrypto.
Maximum cryptographic privacy for regulated and security-sensitive teams. Files are encrypted on your device using AES-256-GCM before transmission. The Synkk server only ever sees opaque ciphertext blobs, while the web workspace decrypts files locally in your browser memory via WebAssembly.
Zero Server Knowledge: Plaintext notes and encryption keys never touch server disks.
WebAssembly Decryptor: High-performance client-side decryption right in your browser.
Team Key Governance: Asymmetric key exchange protocols for secure multi-seat sharing.
DEVICE (LOCAL)
Plaintext Note
Markdown / Images
AES-GCM
SYNKK SERVER
Opaque Blob
Zero Knowledge
Wasm
WEB VIEWER
Decrypted Note
In-Browser DOM
Military-Grade Security · Zero-Knowledge E2EE
Enterprise Vault Protection
Enterprise privacy on infrastructure you own.
Every note and attachment is encrypted on your client device using 256-bit AES-GCM with PBKDF2 key derivation before transmission. The Synkk server only ever sees opaque ciphertext blobs. In-app DLP scanning intercepts leaked OpenAI tokens or AWS credentials in real time before they leave your machine.
Client-Side AES-256-GCM: 100,000 PBKDF2 iterations ensure master keys never touch server disks.
LAUNCH CHANNELS GitHub hosts the public open-source plugin and server code. Lemon Squeezy and AppSumo manage commercial licenses. Enterprise consultations are booked directly at book-it.ottomate.space.
08 / Built in the open
Plugin now. Server release next.
The public plugin is downloadable today. The rows separate what is live, what must clear launch, and what follows.
The installable plugin release is public on GitHub now with hash-based sync, Safety Shield deletion protection, path exclusions, and automatic conflict forking.
Self-hosted server with SQLite WAL, web Markdown workspace, 2D visual graph view, member path permissions matrix, note version rollback, and Docker orchestration.
On-demand ghost files for large media attachments, client-side zero-knowledge End-to-End Encryption (E2EE), native mobile background sync relays, and 2-second QR pairing.
Zero-Knowledge E2EEMobile Ghost Files2s QR PairingBackground Sync
SHIPPED
Agentic Knowledge Graph & RAG Server
Self-hosted vector embeddings, hybrid semantic search, [[wikilink]] graph traversal, and private local LLM copilots querying your vault with zero cloud leakage.
Vector EmbeddingsSemantic SearchLocal RAGPrivate AI
IN PROGRESS · Q4
Enterprise Webhook Automation & Event Relays
Signed HMAC-SHA256 webhooks dispatching instant notifications to Slack security channels on DLP secret violations, Discord team channels on vault syncs, and custom Zapier automation triggers on note updates.
Upgrading the web Markdown editor from basic form sync to a fully bound CodeMirror 6 collaborative canvas with live remote carets, operational transforms, and multiplayer undo/redo matching the Obsidian desktop plugin.
Autonomous background research agents synthesizing new notes, periodic health audits, and visual Obsidian .canvas synthesis.
Note AgentsVisual CanvasHealth AuditsAutonomous AI
09 / Before you install
Clear answers before you sync.
The public plugin, current product, and future roadmap are labelled separately so you can choose the right starting point.
01What can I install today?
The Obsidian plugin v1.0.0 is public on GitHub. The Synkk web product currently provides authenticated sync, the editor, Graph View, member path permissions, versions, and restores.
02Does Synkk replace my Markdown files?
No. Your vault remains portable files and folders. Synkk adds controlled sync, access, and recovery around the notes you own.
03Is character-level CRDT sync available?
Yes. Synkk provides real-time character-level CRDT multiplayer editing powered by Yjs over Laravel Reverb, featuring remote cursor awareness, shared undo history, and offline convergence across both the web editor and Obsidian.
04When does the $79 commercial license checkout open?
After the public server package, Lemon Squeezy and AppSumo checkout flows, and license activation screens are verified end to end. Until then, the page does not accept payment.
05Can I self-host Synkk?
Yes. Synkk Community is 100% free and open-source on GitHub. You can self-host using single-command Docker Compose on your own VPS or homelab hardware.
06What happens when two devices edit the same note?
Synkk features an in-editor visual 3-way diff sandbox for side-by-side note reconciliation, as well as real-time character-level CRDT multiplayer synchronization across web and Obsidian.
07Can I sync only selected folders?
Yes. The plugin supports selective folder and configuration rules, plus on-demand ghost files for large media attachments so mobile devices stay lean and fast.
08Does Synkk read my private vault?
Synkk only receives the files and paths your configured device and team permissions allow. When End-to-End Encryption (E2EE) is enabled, notes and real-time collaboration updates are encrypted and decrypted strictly on your device using WebCrypto AES-256-GCM before transmission, so the server only ever sees opaque ciphertext blobs. For E2EE vaults, server-side search and RAG indexing are disabled to guarantee zero server knowledge.
v1.0.0 Public Release · GitHub Ready
Your next chapter
Install the Obsidian plugin.
Download v1.0.0 from GitHub, then follow the setup guide to connect it to Synkk.