Insights

Every collection management platform on the market today can read your data. Artwork Archive, ArtBinder, Collectrium — they all encrypt data in transit and at rest, but they hold the decryption keys. This means their employees, a subpoenaed server, or a data breach could expose your entire collection.

We didn't think that was acceptable for a platform handling information about collections worth six, seven, or eight figures.

Collectorista uses client-side encryption: your data is encrypted in your browser using AES-256-GCM before it ever reaches our servers. The encryption key is derived locally from your master password using PBKDF2. We never see your password. We never see your key. We never see your data in plaintext.

This isn't new cryptography — it's the same model used by Bitwarden, ProtonMail, and Standard Notes. What's new is applying it to collection management.

What this means in practice:

• If our servers are breached, attackers get ciphertext — useless without your key
• We cannot comply with a data request for your collection details because we don't have them
• No Collectorista employee can browse your holdings, even with database access

What this costs you:

• You must remember your master password. We cannot reset it.
• Server-side search requires blind indexing, which is slightly less flexible than plaintext search
• Sharing with team members requires key exchange, adding a step to the invitation flow

We believe this tradeoff is correct for our users.

A private collection isn't managed by one person alone. Art advisors review provenance. Insurance brokers need valuations. Curators catalog and photograph. Family members browse. Each of these people needs access to your collection — but not the same access.

Most platforms offer two levels: admin and viewer. Collectorista provides five distinct roles, each with a carefully designed permission set.

The Five Roles

Owner — Full control over the collection, organization settings, team membership, billing, and audit logs.

Curator — Can create, edit, and catalog items. Sees location, insurance, ownership, and provenance data. Cannot delete items or view financial valuations.

Advisor — Read-only access focused on collection knowledge. Cannot see locations, valuations, insurance details, or ownership records.

Insurance — Tailored for insurance brokers and appraisers. Sees locations, valuations, and insurance details — but not ownership records or provenance chains.

Viewer — The most restricted role. Cannot see locations, valuations, insurance, or ownership.

Permission Matrix

Permission	Owner	Curator	Advisor	Insurance	Viewer
View Basic Info	✓	✓	✓	✓	✓
View Location	✓	✓	—	✓	—
View Valuations	✓	—	—	✓	—
View Provenance	✓	✓	✓	✓	✓
View Insurance	✓	✓	—	✓	—
View Ownership	✓	✓	—	—	—
Create Items	✓	✓	—	—	—
Edit Items	✓	✓	—	—	—
Delete Items	✓	—	—	—	—
Manage Members	✓	—	—	—	—

Encrypted Field Visibility

Sensitive data — valuations, locations, provenance, and insurance details — is encrypted with zero-knowledge encryption. Even when decrypted, Collectorista enforces role-based visibility. This two-layer approach — encryption plus role enforcement — means that even if a team member has the decryption key, the application will not render fields their role cannot access.

The Getty Research Institute's CDWA provides the framework used by museums worldwide to catalog objects. It defines over 540 categories.

Collectorista implements CDWA's core categories adapted for private collection workflows:

• Object identification: Classification, title, creator attribution, dating with certainty levels
• Physical description: Materials, dimensions, condition with structured reporting
• Provenance: Ordered ownership chain with dates and documentation
• Exhibition history: Full exhibition record with venue, dates, catalog references
• Valuation: Acquisition cost, current valuation, insurance value (all encrypted)
• Location: Current location and movement history

Why does this matter? Three scenarios:

Insurance claims — After a loss, your insurer needs documented provenance, condition history, and professional photographs.

Estate transfer — Museum-grade records make the difference between a smooth transfer and a contested estate.

Institutional loans — Registrars ask for documentation in a format they recognize.

The collection management market assumes you collect art. Every platform is built exclusively for visual art.

But collectors collect. A person with significant art often also owns watches, handbags, design objects, or wine. These have completely different documentation needs:

Watches need reference numbers, movement caliber, complication lists, polish history, and accessory completeness. An unpolished vintage Rolex is worth 30-50% more than a polished one.

Handbags need leather type, hardware finish, authentication records, blind stamp data, and accessory completeness. A Birkin with full set is worth 15-30% more than the bag alone.

Design objects need period classification, material analysis, maker marks, and edition tracking.

We built Collectorista with dedicated schemas for each type — purpose-built data structures, not generic custom fields.

When you upload your collection to a platform that holds your encryption keys, you're trusting: every current employee with database access, every future employee, the company's security practices, their response to subpoenas, and the company's future ownership.

Consider what your collection data reveals:

• What you own — valuable for targeted theft
• Where it's stored — physical security implications
• What you paid — financial privacy
• Who co-owns it — family and business relationship exposure
• Insurance valuations — claim fraud targeting

Zero-knowledge encryption eliminates the trust surface. The platform processes your encrypted data. If breached, the attacker gets ciphertext. If subpoenaed, the platform can only produce ciphertext.