Client portals usually mean a login in front of a database the provider can read. This one is built the other way round: membership means holding a sealed key.
“Access granted cryptographically, removed cryptographically.”
For firms that need a persistent, professional and genuinely confidential client-facing space.
Each participant holds their own X25519-sealed envelope of the space key; removal rotates the rest.
Encrypted discussion and sign-off next to the documents they concern.
Version history and a 30-day trash for recovering an earlier draft without provider access.
Clients are told something arrived; the notification carries no readable content.
Grants, revocations, link lifecycle and access events, append-only and exportable.
Ending a relationship revokes access, rotates keys and records the change in one action.
In a conventional portal, an access-control list decides who may read, and the server can always read. In a zero-knowledge portal, the ability to decrypt is the access control, so a permission bug, a misconfiguration or a compromised admin account does not produce readable documents.
They notice a clean space with their documents in it, notifications when something is ready, and the fact that they never have to hunt through email. The cryptography stays invisible, which is the only way non-technical clients adopt anything.
Add each person individually rather than sharing one login. Every participant then has their own key envelope and their own audit entries, which is what makes an access record meaningful.
Yes — each client space has its own key, so separation is cryptographic rather than a matter of folder permissions.
A browser. A free account gives them persistent access, notifications and history.
No. Files are encrypted on your device with XChaCha20-Poly1305 before the upload starts, using keys derived locally with Argon2id. Our servers hold ciphertext only, so there is no preview, no scanning and no staff view of your transfer.
No. They open the link in any browser, type the passphrase you shared separately, and the file is decrypted locally on their machine. Nothing to install, nothing to sign up for.
Public share links always expire within 24 hours at most, and you can make them shorter, limit the number of views, or revoke them instantly. Expiry is enforced by the system, not by a reminder.
Uploads are chunked, resumable and verified after upload, so multi-gigabyte transfers survive a dropped connection, a closed laptop or a hotel network. You resume instead of starting again.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can test a real client hand-off before paying anything.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to store offline. That is the same property that keeps anyone else, including us, out of your account.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
