Service description

1. Subject matter

Slayper is a service for the end-to-end encrypted transfer of files between businesses and their business partners (Section 3(1) GTC). This service description sets out the range of functions per plan and per access route as well as the system requirements (Section 3(2) GTC). It also states the lower limits when downloading in the browser on mobile devices (Section 3(4) GTC) and the range of functions of Slayper Web, including the limits of individual browsers (Section 3(8) GTC).

Slayper is a transfer service, not a storage or archiving service (Section 3(3) GTC). A transfer is called “a Slayper” in the service. The terms used in this service description correspond to those of the GTC.

2. Access routes

• Apps for Mac and Windows: the full range of functions of the service, in English and German. One account can be used on several devices, including Mac and Windows together; each device has its own key.
• Slayper Web: access in the browser at app.slayper.com, included in all plans, with a reduced range of functions compared to the apps (sections 5 and 7). Each browser is a separate device of the account.
• Outlook add-in: attach files encrypted or request files while writing an email in Microsoft Outlook.
• Download, upload and verification pages: recipients download files in the browser, uploaders upload files via an upload link, in each case without an account and without installation. On the verification page at slayper.com/pruefen, a Slayper record can be verified. Invitations to a team are accepted on a separate page.
• Integrations: integration with CRM and business software from the Pro plan onward: transfers can be assigned to a record in the business software, the service reports events for them to the business software with a signature (only information about the transfer, never keys or content), plus an embedded window for sending and requesting. The Provider sets up the integration of a business software. Integrations are not included in the Free plan.

3. Functions

Sending

• Files are encrypted on the user's device before they leave it. Each transfer can contain up to 100 files in any file format; the size per transfer depends on the plan (section 4).
• Recipients with a Slayper account receive the transfer directly in their inbox. All others receive a link; only the link itself contains the key.
• A reference (for example a project, quote or order) and a message can be added to each transfer; both are encrypted.
• The sender can delete a transfer at any time.

Protection of the link

• Confirmation by code: if an email address is entered, the recipient confirms it with a code received by email. Only the entered addresses receive a code.
• PIN: without an entered address, a four-digit PIN is mandatory. After five incorrect entries, the link is blocked permanently.
• There is no link without one of these two forms of protection.

Download limit and availability

• Download limit: 1, 3, 5 or unlimited downloads, with confirmation by code per confirmed address, with a PIN for the link as a whole. Once all downloads have been used, the transfer is deleted. Recipients who receive the transfer in their inbox are not affected by this.
• Availability: 48 hours, 7, 14 or 21 days, no more than 7 days in the Free plan. In a team, an administrator can set a lower maximum. After that, the transfer is deleted automatically. The deletion periods in detail are set out in the Data Processing Agreement (Annex 1, No. 4).

Receiving

• Recipients without an account open the link in the browser, confirm their address or enter the PIN where required and download the files. Decryption takes place only on their device. Receiving is free of charge for them (Section 12 GTC).
• Slayper users find received transfers in their inbox, with sender, reference and remaining time.
• After complete decryption, the checksums are compared and receipt is confirmed as “complete and unaltered”.

Requesting

• Upload links for business partners without an account, valid for 48 hours, 7, 14 or 21 days (plan and team limits as for sending), with 1, 3, 5 or unlimited uploads and with confirmation by code or a PIN.
• Uploading takes place in the browser, encrypted and without an account. Requests to Slayper accounts appear directly in their app or in Slayper Web.
• Received files appear in the requester's inbox. Files that third parties upload via upload links count towards the requester's sending volume (Section 12(3) GTC).

Link emails and system sending

• In the apps, link emails are sent via the user's own email mailbox if one is linked. Without a linked mailbox, the server sends them via the system address notify@slayper.com (system sending, Section 11(4) GTC). Confirmation codes always come from the system address.
• System sending is currently limited to 200 emails per account and day and 50 recipients per transfer.
• In Slayper Web, link emails always go via system sending. In the Outlook add-in, the link is placed in the email that the user sends in Outlook.

Slayper records

• For every transfer, every receipt and every upload link, a Slayper record is created automatically (Section 13 GTC): time, sender and device, files with size and SHA-256 fingerprint, recipients, protection of the link, confirmed addresses, downloads, confirmation of receipt and deletion.
• Each event is signed, chained to the previous one and anchored every hour via OpenTimestamps.
• Records can be downloaded as a PDF and as a verification file, and collected as a ZIP for a period, a contact or a matter.
• Retention: ten years after the respective event, one year in the Free plan (details in Section 13(3) GTC).

Address book and team address book

• Personal address book with contacts, company, favorites and distribution lists, suggestions when entering recipients and import from vCard and CSV. It is end-to-end encrypted.
• In the Team and Team Plus plans, additionally a shared, end-to-end encrypted team address book. An administrator decides whether all members or only administrators may edit it.

Team management and policies

• In the Team and Team Plus plans: the roles administrator, member and reviewer (Section 5(2) GTC), invitations by email (valid for 14 days), an overview of the sending volume and reviewer access to the records of all members without their encrypted parts.
• Policies that the server enforces for all members: allowing links without recipient addresses or not, allowing system sending or requiring the user's own mailbox, maximum availability, requirement to confirm by code, editing of the team address book, requirement for two-factor sign-in and the type of key backup for new devices.
• Volume: email notices at 80% and 100%, tolerance up to 110%, additional volume only when expressly booked (Section 6(3) and (4) GTC).

Two-factor sign-in

• Sign-in with a passkey (for example Touch ID on a Mac or Windows Hello on Windows) or with a password and a code from an authenticator app. Plus recovery codes for emergencies.
• In a team, an administrator can require two-factor sign-in for all members.

Digital signing

• From the Pro plan onward, only in the apps for Mac and Windows: sign PDF and Word documents on the device, sealed in accordance with PAdES, with a timestamp pursuant to RFC 3161. Only checksums are transmitted, never the document.
• The result is not a qualified electronic signature. Details and limits are governed by Section 14 GTC.

4. Plans

The limits per plan. Volumes are stated in decimal units (1 GB = 1,000,000,000 bytes, 1 TB = 1,000 GB) and apply per calendar month (Section 6(2) GTC). Prices are set out in the price list.

The trial period applies to teams founded in the app, without payment details and without automatic transition to a paid contract (Section 7 GTC). Additional volume is available as packages of 250 GB, 1 TB and 5 TB per month and as a one-time package of 1 TB for the current month (Section 6(4) GTC). The size per transfer is the same in all apps, in Slayper Web, in the Outlook add-in and in the embedded window in business software (Section 3(4) GTC).

5. Functions per access route

6. System requirements

• App for Mac: macOS 14 Sonoma or later.
• App for Windows: Windows 10 (version 1809 or later) or Windows 11, 64-bit.
• Outlook add-in: Outlook for Windows, Mac and on the web with Microsoft 365, Exchange or Outlook.com.
• Slayper Web: an up-to-date browser, currently Chrome, Edge, Firefox or Safari (section 7).
• Recipients and uploaders: an up-to-date browser without extensions, no account and no installation.
• An internet connection for all access routes. Where the apps and the add-in are available is stated on the download page.

7. Slayper Web and browsers

Slayper Web offers in the browser: sign-in with a passkey or with a password and an authenticator app, registration in the Free plan, overview, sending, inbox, requesting, history, Slayper records as PDF and verification file, address book and team address book, team management and settings. The same plan limits apply as in the apps. Section 5 shows what is only possible in the apps.

Limits of individual browsers

• Chrome and Edge: large files are written directly to the chosen file or folder, including above 2 GB.
• Firefox and Safari: large files are streamed to the browser's download folder when downloading.
• Safari: Safari may delete a website's stored data after seven days without use, including the browser's key. The browser must then be set up again; Slayper Web points this out in Safari.
• All browsers: the tab must stay open while sending and receiving. Please pack folders as a ZIP yourself before sending.

Mobile devices

On smartphones and tablets, files are decrypted in the browser's memory. This applies to Slayper Web and to the recipients' download page. Up to 512 MB per file are possible there; please open larger files on a computer or in the app. On the download page on mobile devices, “Download all” is not offered from a total size of 1.5 GB; files up to 512 MB can still be downloaded individually.

Setting up new browsers

So that a browser can also open transfers received before it was set up, it is confirmed with a code on another device of the account or set up with a backup file. Confirmation is currently possible from the app for Mac and from a browser that has already been set up, not yet from the app for Windows. A team policy can exclude backup files.

Unlike the apps, the browser loads the program code of Slayper Web from the Provider's server each time it is opened. For particularly sensitive content, the Provider recommends the apps (Section 3(8) GTC).

8. Changes

The Provider continues to develop the service (Section 3(6) GTC). Changes to the services are governed by Section 21 GTC. The version of this service description applicable at the time the contract is concluded or the respective booking is made is authoritative (Section 2(1) GTC).

Last updated: October 22, 2026