Skip to content
Coastal data, kept safe.
Pontile
VideoProtocolRequest a demo
Features

All the work on a concession, in one encrypted space.

Hubs, sections, roles, revocation, deadlines and the audit log: what Pontile does, shown with real screenshots of the Italian interface.

Request a demo Pontile for organizations
  • Encrypted in the browser
  • Servers in Italy
  • For concessions, ports and tenders

Hubs and sections

One hub per concession title, sections with separate access.

You create a hub for each concession, with the title reference. You split it into sections (Title, Technical, Financial, Tender or your own), each with its own keys and members. Inside: folders, versions, in-browser preview and files up to 10 GB.

The hub “Lido Azzurro” with the sections Titolo, Tecnica and Gara 2027 and the four documents of the Titolo section.
Each section has its own members and key epoch.
The upload of the 25 MB “Offerta tecnica Gara 2027.pdf” into the Gara 2027 section, with the “Invio cifrato” (encrypted upload) progress bar.
The file is encrypted in the browser as it uploads: the server receives it unreadable.

Roles and Deposit

Everyone sees what they need.

Every access is a role in a section, signed by whoever grants it. You can give it an expiry date: when it expires, access stops.

RoleReadsUploadsEdits and deletesManages members
OwnerThe whole hubYesYesYesThe whole hub
AdministratorThe sections you assignYesYesYesTheir sections
CollaboratorWho works on the fileYesYesOwn files onlyNo
ReaderWho only needs to consultYesNoNoNo
DepositWho delivers without readingNoYesNoNo
The Tecnica section as seen by Nautica Servizi Srl in Deposit: “Accesso in deposito”, an area to deliver files and the receipt of the certificate it delivered.
In Deposit you deliver and see only your own receipt.

Revocation

Remove someone and the keys change.

When you remove someone, the server blocks them at once and your browser generates new keys for the section, signs them and hands them only to the remaining members. Documents uploaded from then on are unreadable to the person who left.

Whatever the person had already downloaded stays with them: no system can delete it from their computer.

The confirmation “Rimuovere p.greco@studiogreco.example dalla sezione?”, explaining the immediate block, the key rotation and what removal cannot do.
Before you confirm, Pontile says what revocation does and does not do.
The Titolo section after the removal: one active member and “Epoca delle chiavi: 2” (key epoch 2).
After the removal the section moves to a new key epoch.

Deadlines

Encrypted deadlines, reminders without content.

Fee payment, inspection, bid submission: each deadline belongs to a section and has its own recipients. The text stays encrypted; the reminder email only says there is a deadline and asks you to open Pontile.

The deadlines of the Lido Azzurro hub: a harbour office inspection in 6 days, the Gara 2027 bid deadline in 19 days, the 2027 fee and the fire certificate renewal.
Deadlines by section, with the next reminder.

Audit log

Who did what, and proof that nobody changed it.

Every event of the hub (invitations, uploads, openings, revocations, key rotations) is signed by whoever performs it and chained to the previous one. Your browser checks the chain: if an event were removed or altered, you would see it. The details are encrypted.

The audit log of the Lido Azzurro hub with “Catena verificata” (chain verified): all 27 events are signed by their authors, followed by the list of events.
“Chain verified”: the check runs on your own device.

Fingerprints

You know who you are sharing with.

Before granting access, Pontile shows the key fingerprint of the person: 60 digits to compare with them on the phone or in person. Your device remembers your contacts’ keys and warns you if they change; a transparency log of keys makes a substitution detectable.

The “Membri di Gara 2027” dialog: the key fingerprint of luca.ferri@studiolegaleferri.example in twelve groups of five digits, the Collaboratore role and the box “I compared the fingerprint with the person and it matches”.
Access is granted after comparing the fingerprint.

Later

Not there yet: we list them here to say what is missing today.

  • Desktop and mobile apps Later

    For now Pontile runs in the browser.

  • Passkeys Later

    Today the second factor is a one-time code (TOTP).

  • Push notifications Later

    Today notifications arrive by email, always generic.

See Pontile on your own documents.

A demo with the Coste360 team, on a case like yours.

Request a demo How we protect your data