Accountants, architects, recruiters, notaries, advisers: your competitive asset is discretion. This is infrastructure that enforces it instead of promising it.
“Discretion as a property of the system, not of the staff handbook.”
For small and mid-sized professional firms that handle confidential client material without a dedicated security team.
Organisation management with per-client encrypted drives and per-member sealed keys.
Encrypted internal communication so the whole working context stays in one protected place.
Zero-access mail addresses for the firm, with client-side search across your messages.
An encrypted secrets vault replaces the spreadsheet of portal logins.
Live Clone mirrors a working folder continuously, encrypted, so a ransomware event is a restore rather than a crisis.
Hosted, nothing to self-host, no PGP rituals, defaults that are already the safe option.
Attackers know that firms holding valuable client data rarely have a security function. The practical answer is not more policy documents; it is a stack whose default state is encrypted, whose sign-in uses passkeys, and whose sharing is revocable.
Each additional tool is another copy of client data, another admin console, another offboarding step. Bringing files, messaging, mail and credentials into one encrypted workspace removes copies rather than adding controls on top of them.
You can point to published subprocessors, documented storage regions, an append-only audit trail and an architecture where the provider holds no key — and to our compliance page, which states plainly which certifications we do and do not hold.
No. It is hosted, and it is zero-knowledge, which means hosting it does not give us access. You get the operational simplicity of SaaS without the readable copy.
Yes. Exports from common chat and storage products can be imported into channels and drives, and Live Clone can mirror an existing local folder continuously during a gradual move.
No. Everything is encrypted on the device before it is uploaded, with XChaCha20-Poly1305, using keys derived locally with Argon2id and wrapped per member with X25519. Our servers hold ciphertext and sealed key envelopes, so there is no admin view, no support tool and no classifier that can reach your content.
No. There is nothing to self-host and no key server to operate. You create an account, invite colleagues and clients by email, and the encryption happens transparently in the browser, desktop and mobile apps.
We do not currently hold SOC 2 or ISO 27001 certification, and we say so publicly rather than implying otherwise. Our compliance page documents where we are, what is in progress, and what is planned. What we can demonstrate today is the architecture itself: client-side encryption, per-member key envelopes and an append-only audit trail.
Removing a member revokes access and rotates the remaining key envelopes, so an old copy of a key stops opening anything new. Every membership change, share creation and revocation is written to an append-only log.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to be stored offline. That is the same property that stops anyone else, including us, from reading the account.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can validate a real client workflow before committing.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
