Help & Documentation

How StateNull works

Send a Proof Request, get the photos back, approve them and hand your customer a Proof Pack. You work in your account on the web and in the StateNull app; anyone without the app gets a guest link and needs no account.

Send a Proof Request with a guest link

A guest link lets someone without the StateNull app — a customer, a tenant, a subcontractor — send you the photos a job needs, from their phone's browser. They need no account and no app.

1. In your account, open Jobs and press New job. Pick a template: it lists the photos you need.
2. Under Assign to, keep Guest link (no account needed) and press Send proof request.
3. Copy the link and send it yourself — by text, WhatsApp or e-mail; StateNull does not send it for you. Always send the whole link: the part after #k= is the key that opens the photos, and StateNull's servers never see it.
4. Your guest opens the link, takes the photos on the list and sends them. They appear on the job page as they arrive.
5. Check each photo, then press Approve — or Request change, and your guest can send that photo again on the same link.

Lost the link? On the job page, New link (replace) makes a new one, and the old link stops working.

Photos sent through a browser link are recorded with where they came from and when they arrived. They are not sealed at the moment they are taken, as photos taken in the StateNull app are.

Your Review Code

The photos and files your jobs collect are end-to-end encrypted with your office's own key. The Review Code (XXXX-XXXX-…) is the backup that opens that key. StateNull never sees it and cannot reset it.

It is not your password, and not your Cloud Vault Recovery Code.

You get it once, when your office key is first set up — usually when you send your first Proof Request. Save it in your password manager, or print it and keep it somewhere safe.

Day to day you rarely type it. When you sign in with your password, your evidence usually opens by itself; a browser that cannot open it offers Unlock with my phone and Send to my phone. The Review Code is for when no phone can help.

Where to type it: on a job page under Submitted evidence, with Use my Review Code (backup) — or in the StateNull app when it asks for it.

Lost it? Nobody can reset it, not even StateNull. Your evidence still opens wherever your key already is — for example the StateNull app you are signed in to, or a browser that already opens it. Before you sign out of the last such device, make sure you still have the code.

The Proof Pack

The Proof Pack is the PDF you give your customer when a job is approved: the request, the approved photos and their details, with a Proof Pack ID on every page.

1. Open the approved job and press Download Proof Pack (PDF). The pack is built in your own browser from the evidence you approved, so unlock the evidence first if the page asks you to.
2. Send it the way you send other documents — for example as an e-mail attachment.

Anyone can check a Proof Pack at statenull.com/verify: enter the Proof Pack ID printed at the bottom of each page, or drop the PDF. A paper copy cannot be checked this way.

Get the app

Install from Google Play, or request a secure download link from the customer portal (it is emailed, resumable, tied to your account, and replaced whenever you request a new one). The app is delivered locked & encrypted — sign in with your email + password (or your organisation SSO) to activate it. Organisations using their own EMM (Intune, Jamf, Workspace ONE) can distribute the app + our managed-app-configuration bundle instead — see On-premise / your admin.

Backups: what “In your cloud” means

Each item in the Album shows whether its copy reached its destination and how the app checked it. Read how we check

Secure calling

1:1 video/audio calls are end-to-end secured and relayed over TLS on port 443 (TURN relay-only) so media never traverses arbitrary ports. Open Comms → Calls in the app, pick a contact, and start a call.

FAQ

Is my data isolated from other organisations? Yes — every tenant has an opaque id and all data access is scoped to your authenticated session.
Can I turn on 2FA? Yes — Portal → Security (authenticator app, email codes, backup codes).
Where are the legal terms? /legal · /privacy · /terms · /responsible-use.

Known issues

Contact support

Use the contact form — no sign-in needed — or email media.supply@statenull.com. Signed-in customers can instead open a ticket from the customer portal → Support to track its status and our responses. For a suspected bug, include your app version and what you were doing.

Device enrollment

Your administrator generates a one-time enrollment link (Console → Onboarding, or Portal → Enroll a device). Open it on the device to bind it to your organisation. Enrolled devices appear in the operator console under Devices & Users with their owner, certificate state, and compliance. Policies (screen-lock, encryption, camera, kiosk, blocklists) apply automatically.

Single sign-on (SAML)

Operators configure SSO in Console → SSO & Users. Paste your IdP's SSO URL + signing certificate, then hand the IdP these Service Provider values (shown on that page): SP Entity ID, ACS URL, and metadata at https://app.statenull.com/saml/<org>/metadata. Works with Okta, Entra ID, ADFS, Ping, and Keycloak. Employees are auto-provisioned on first SSO login. Users sign in via Sign in with SSO on the portal.

Updates & channels

Releases ship on two channels — stable and beta. Each release has a version and notes, and the full history is public at /changelog.

How you get an update depends on how you installed:

• Google Play — Play delivers updates automatically, like any other app. Nothing to do.
• Direct download or managed deployment — the app does not check for updates and will not prompt you. To move to a newer build, request a fresh download link from your account and install it over the top, or your operator re-pushes the build through your EMM. A machine-readable manifest is published at https://app.statenull.com/api/updates/manifest for that automation.

In-app update checking is not implemented today. We will say so here when it ships — until then, watch /changelog if you install outside Play.

On-premise

Organisations can self-host the whole stack. From the operator console (Deployment) generate a pre-configured bundle: docker-compose.yml + .env (with a generated admin token + your license) + install.sh. Run ./install.sh — one command brings up the edge, control plane, and marketing site and prints your Admin Center URL.