Outsourced QA is where scope creep meets access creep: a folder shared for one milestone quietly stays open for two years.
“Access that ends when the engagement does.”
For producers and studio it managing outsourced qa, co-development partners, localisation and marketing vendors.
One drive or room per vendor, with membership and keys that do not overlap other partners.
Links expire on a schedule and memberships are removed at milestone close, with key rotation for the rest of the team.
Vendors upload captures, crash dumps and reports into the same encrypted space instead of emailing them.
Anything displayed in the protected viewer carries watermarking, making a leaked screenshot attributable.
Append-only logs show exactly who had access and when it ended, without exposing content.
Encrypted chat with the vendor lives beside their files, and closes with the engagement.
Nobody plans to leave a vendor inside the pipeline forever. It happens because revoking access is manual, unlogged and spread across several products. Making revocation cryptographic and one-click removes the excuse.
Rather than trusting a permission matrix, each vendor space has its own keys sealed to its own members. There is no configuration mistake that suddenly exposes the whole studio drive.
Watermarking, per-recipient links and access logs turn 'somebody leaked it' into a short list of candidates, which is usually enough to end the leak and settle the contract question.
Yes — scope a space to the material they need and give them their own room and drive folder for returns.
No. Metadata events — membership, link creation, views, revocation — are logged; only content stays unreadable.
No. Everything is encrypted on the device before it leaves it, with XChaCha20-Poly1305, using keys derived locally with Argon2id and wrapped per member with X25519. Our servers hold ciphertext and sealed key envelopes, so there is no admin view, no support tool and no classifier that can reach your content.
No. There is nothing to self-host and nothing to configure: you create an account, invite people by email, and encryption happens transparently in the browser and apps. Zero-knowledge here is the default, not an expert mode.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can validate the workflow before moving a studio onto it.
Removing a member revokes their access and rotates the remaining key envelopes, so their old copy of the key stops opening anything new. Every membership change is written to an append-only audit trail.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to keep offline. That is the same property that stops anyone else, including us, from reading your workspace.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
