Agencies hold competing clients' material at the same time. Separation should be cryptographic, not a folder-permission convention nobody audits.
“Two competing clients, two sets of keys, zero overlap.”
For creative, marketing, technical and consulting agencies delivering to multiple clients with staff and freelancers.
A separate encrypted space per client, with membership and keys managed per space.
Removing a contractor revokes access and rotates the remaining keys, with an audit entry.
Multi-gigabyte video, 3D and design assets upload in resumable chunks with verification.
Send review copies watermarked per viewer, before final delivery and payment.
Keep internal discussion encrypted and separate from the client-facing channel.
Exportable access trails per client for security questionnaires and NDA obligations.
Enterprise, legal, healthcare and public-sector buyers now send security questionnaires to agencies. Being able to state that your provider cannot read client material, that access is per-client, and that you can export an access trail turns a procurement obstacle into a differentiator.
Not through cryptanalysis: through a freelancer still in a shared folder, a review link posted in a group chat, a master uploaded to a personal cloud because the deadline was tonight, and a departing account manager's laptop. Per-space keys, short-lived links, reliable large uploads and session revocation address each one.
Replacing a storage product, a transfer service, a chat tool and a review link service with one encrypted workspace removes copies rather than adding controls on top of them — and usually costs less than the sum of the parts.
Yes. They are invited into a single space and hold a key only for that space.
Give each stakeholder their own protected link, or add them to the client channel where comments and approvals stay encrypted and attributable.
No. Files are encrypted on your device with XChaCha20-Poly1305 before the upload starts, using keys derived locally with Argon2id. Our servers hold ciphertext only, so there is no preview, no scanning and no staff view of your transfer.
No. They open the link in any browser, type the passphrase you shared separately, and the file is decrypted locally on their machine. Nothing to install, nothing to sign up for.
Public share links always expire within 24 hours at most, and you can make them shorter, limit the number of views, or revoke them instantly. Expiry is enforced by the system, not by a reminder.
Uploads are chunked, resumable and verified after upload, so multi-gigabyte transfers survive a dropped connection, a closed laptop or a hotel network. You resume instead of starting again.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can test a real client hand-off before paying anything.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to store offline. That is the same property that keeps anyone else, including us, out of your account.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
