Secure digital reading · for everyone

One account, every library.

The same sign-in whether you borrow books or run the library. What you see afterwards depends on what your libraries have given you.

Some libraries have their own sign-in. If yours does, sign in from your library's page rather than with a password here.

Create a library Find a library

Security & compliance

The boring parts, in writing.

You are handling copyrighted files, and often minors' data or patients' presence in a building. Both have rules. This page is what to send your IT and information governance teams before they ask.

The short version

We hold as little about your readers as the product allows, we never sell or share any of it, and everything we do hold, you can export or delete without asking us first.

Content protection

Publishers get terms they recognise.

Every title on your shelves is protected with Readium LCP — an open standard from EDRLab, not a proprietary lock. Readers don't install a separate DRM app, and the same file opens in any certified LCP reading app.

Open specification

LCP is published by EDRLab and readable by anyone. Shipping it needs their certification, which is what makes one library's file open in another vendor's reader.

Per-reader licences

A borrowed file carries a licence issued to that reader and that loan period. It stops opening when the loan ends, and it is tied to their account, not a device.

Masters stay sealed

Your original files are never handed to a reader. Only encrypted copies with their own licence leave the platform.

You set visibility

Title by title: open to every reader, restricted to staff, or limited to an age range. Protection isn't the lever — who can see it is.

Data protection

Less data, deliberately.

The product is designed to need very little about a reader, because the least risky record is the one that was never created.

No clinical or student records. We never receive, request or store them. There is no integration with a patient administration system or a student information system.
Codes instead of identities. Where readers join from a printed code, we hold the code and the loan — no name, no record number, nothing tied to a chart or a file.
Regional hosting. Choose where reader data and files live — any of our storage regions, named in your agreement. EU for GDPR; other regions on request.
Export and deletion built in. A named reader's record and loan history can be exported or erased from the admin screens, by you, without a support ticket.
No advertising, no resale. We have no advertising business and no data business. Reading data is never sold, shared or used to train anything.

Children & schools

Where minors are involved.

Schools, paediatric units and family libraries carry obligations that adults' libraries don't.

Age-banded catalogs. A title can be limited to an age range, so a child's home screen only shows what's appropriate for them.
Guardian consent. Child accounts are created by a parent or the institution, with consent recorded.
Separate child accounts. A child's reading is visible to their guardian and to nobody else — not to other staff, not to us.
No profiling without asking. A shelf holds what a librarian put there, never what an algorithm inferred. If a reader ever turns on recommendations, they are built from that reader's own borrowing, stay with them, and are off until they choose otherwise.

Accessibility

A library nobody is locked out of.

Reading is the one thing a library must not make hard. The reader and the admin screens are built against WCAG 2.2 AA. An independent audit, with assistive-technology testing, is scheduled before general availability — we will publish the report and its findings here.

Reflowable text

Type size, spacing, line length and contrast are the reader's choice, including dyslexia-friendly settings.

Screen readers

Built for VoiceOver, TalkBack and NVDA across the borrowing flow, not only the reading view. Formal testing is part of the scheduled audit.

Keyboard and switch

Everything reachable without a mouse or a precise touch, which matters on a hospital tray table.

Audio and read-along

Where a title has narration, text and audio stay in step for readers who need both.

Operations

Running it in your environment.

Nothing to install

Runs in the browser on hardware you already have, including old tablets and locked-down workstations.

Shared devices

A shared tablet or workstation works today through the browser, with readers joining by code rather than by account. A locked-down kiosk mode is on the roadmap, not shipped.

Your sign-in

Staff sign in with email and password today. Organisation single sign-on — Google Workspace, Microsoft Entra or SAML, so access follows role and department — is on the roadmap after launch.

Two-factor for admins

Required for anyone who can change the catalog or see reader records.

Need a completed security questionnaire, a data processing agreement, or a named contact for an audit? Ask and we'll send them.

Start

Send this page to your IT team.

If something here doesn't answer their question, tell us what's missing and we'll answer it directly.

Create your library → See pricing →