Client exchange is where most confidential material escapes: attachments that live forever, links nobody revokes, folders shared with an assistant who forwards them.
“Every hand-off deliberate, time-boxed and recorded.”
For professional services firms, agencies and independents exchanging confidential documents with clients.
Separate links keep attribution intact and make revocation surgical.
Send the link by email and the passphrase by phone or SMS; intercepting one channel then yields nothing.
Links expire within 24 hours at most, so old disclosures do not accumulate.
For material that must be read rather than kept, per-viewer watermarks identify the source.
Continuing clients get an encrypted space with their own sealed key instead of repeated links.
An append-only trail of grants, accesses and revocations you can show if handling is questioned.
An attachment is a permanent copy on mail servers, in backups and in the recipient's client, readable by whoever runs those systems and impossible to withdraw. Replacing it with a revocable, expiring, encrypted link is the single highest-value change most firms can make.
If sending a protected link takes more effort than attaching a file, people will attach the file. Put the link workflow in your templates and email signatures so clients expect it, and make it the default in your own habits.
Inbound matters as much as outbound. A protected upload link lets a client send you identity documents, contracts or assets encrypted from their own browser, so no readable copy sits in your mailbox for years.
Yes. They encrypt in their browser and upload into your encrypted space, without an account.
The passphrase is separate, links expire quickly, view budgets can be capped, and per-recipient links make forwarding visible and revocable.
No. Files are encrypted on your device with XChaCha20-Poly1305 before the upload starts, using keys derived locally with Argon2id. Our servers hold ciphertext only, so there is no preview, no scanning and no staff view of your transfer.
No. They open the link in any browser, type the passphrase you shared separately, and the file is decrypted locally on their machine. Nothing to install, nothing to sign up for.
Public share links always expire within 24 hours at most, and you can make them shorter, limit the number of views, or revoke them instantly. Expiry is enforced by the system, not by a reminder.
Uploads are chunked, resumable and verified after upload, so multi-gigabyte transfers survive a dropped connection, a closed laptop or a hotel network. You resume instead of starting again.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can test a real client hand-off before paying anything.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to store offline. That is the same property that keeps anyone else, including us, out of your account.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
