Docs for finance, with a trail behind every change
Partner integration guides, API references and internal procedures that are reviewed before they change, with a record of who approved what.
An audit trail for every change
Being able to show who changed a procedure, and who approved it, matters as much as the change itself.
Reviewed changes
Locked spaces send every edit through a change request with named reviewers and approvals.
Learn moreImmutable revisions
Each merge is a content-addressed snapshot you can browse and compare.
Organization audit log
Membership, role, site and content changes recorded with the actor and time.
Learn moreAccess control you can explain to an auditor
Least privilege, enforced on every request.
Six roles
From viewer to admin. People outside your organization get a 404, not a hint that content exists.
Learn moreEnforced 2FA
Require two-factor authentication for every member of your organization.
Learn moreUnlisted partner docs
Share integration guides with partners through an unlisted site and a share link.
Learn moreRun it where your data has to live
Docsheaf is a standard Node.js app on PostgreSQL. Deploy it in your own cloud account and region.
Your Postgres
Content, revisions and audit history live in a PostgreSQL database you operate.
Your bucket
Uploads go to local disk or an S3-compatible bucket — AWS S3 or Cloudflare R2.
Support your compliance program
Reviewed changes, audit logs and access control can back up your own controls. Docsheaf doesn’t claim certifications on your behalf.
Frequently asked questions
Can we prove who approved a documentation change?
Yes. In a locked space every change goes through a change request. The request records the author, the reviewers and their approvals, and the merge creates an immutable revision.
Is Docsheaf SOC 2 or ISO 27001 certified?
No, Docsheaf doesn’t hold those certifications. You can run Docsheaf in your own infrastructure, so it falls under your existing controls, and its review trail and audit log can support your own compliance program.
Can we keep data in a specific region?
Yes, when you self-host. Docsheaf uses your PostgreSQL database and your S3-compatible bucket, in whichever region you choose.
Can we share docs with partners but not the public?
Publish the site as unlisted and share the link with partners. Search engines stay out, and anyone who has the link can read it.
Accurate docs. Better answers.
Start writing for free, or talk to us about bringing your team and your existing docs.