Same familiar folders, sharing and sync. Different foundation: keys derived on your device, ciphertext on our servers, no server-side index of your content.
“Everything you liked about Dropbox, minus the provider's ability to look inside.”
For teams and individuals moving off mainstream storage because the provider's access is no longer acceptable.
Folders, uploads, previews and sharing — with names and structure encrypted too, not only file contents.
Live Clone keeps a chosen folder or drive mirrored into your encrypted vault as you work.
Passphrase, expiry, view budget, watermarking and revocation, with key material never sent to our servers.
Restore previous versions and deleted files within 30 days.
The workspace also replaces the readable chat product next to your storage.
Blind indexes computed on your device let you search encrypted content without the server learning your terms.
Dropbox and comparable products document that they can access file contents to provide previews, search, sharing and legal compliance. That is a legitimate engineering choice, and it is precisely the property that makes them unsuitable for material you cannot afford anyone else to read.
You give up provider-side previews of everything, third-party integrations that expect readable access, and administrator password recovery. In exchange, a breach of the provider yields ciphertext, and a request for your data yields metadata.
Move one team or one project at a time, mirror an existing local folder with Live Clone, and keep protected links for external recipients so nobody outside needs an account during the transition.
Yes, through protected links that work in any browser. The recipient does not need an account or an app.
Encryption happens on your device and is not the bottleneck for typical workloads; large transfers use chunked, resumable uploads with post-upload verification.
No. Everything is encrypted on the device before it is uploaded, with XChaCha20-Poly1305, using keys derived locally with Argon2id and wrapped per member with X25519. Our servers hold ciphertext and sealed key envelopes, so there is no admin view, no support tool and no classifier that can reach your content.
No. There is nothing to self-host and no key server to operate. You create an account, invite colleagues and clients by email, and the encryption happens transparently in the browser, desktop and mobile apps.
We do not currently hold SOC 2 or ISO 27001 certification, and we say so publicly rather than implying otherwise. Our compliance page documents where we are, what is in progress, and what is planned. What we can demonstrate today is the architecture itself: client-side encryption, per-member key envelopes and an append-only audit trail.
Removing a member revokes access and rotates the remaining key envelopes, so an old copy of a key stops opening anything new. Every membership change, share creation and revocation is written to an append-only log.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to be stored offline. That is the same property that stops anyone else, including us, from reading the account.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can validate a real client workflow before committing.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
