Conveyancing and brokerage exchanges combine identity documents, contracts and payment details — the exact combination that redirection fraud targets.
“Documents and instructions that cannot be quietly rewritten in transit.”
For estate agents, brokers, conveyancers and property investors exchanging transaction documents with clients and counterparties.
Authenticated encryption means a modified file fails to decrypt rather than opening with altered payment details.
Link and passphrase travel on separate channels, which defeats a single intercepted mailbox.
Public links expire within 24 hours at most and can be revoked instantly.
Buyers, sellers, agents and solicitors scoped per deal with their own keys.
Evidence of who received which version and when, for a file that may be reviewed later.
Identity documents arrive encrypted from the client's browser rather than as mailbox attachments.
It relies on plaintext documents and plausible email. Someone compromises or spoofs a mailbox, alters bank details in an attachment, and the transfer goes to the wrong account. Encrypted, authenticated documents delivered through a channel the attacker does not control break the chain at two points.
Anti-money-laundering checks generate copies of passports and utility bills across every party. Collecting them through encrypted upload links keeps them out of mailboxes and inside a space you can audit and delete.
Give each party its own membership or its own link rather than a shared one, so revocation is targeted and the access record shows who actually saw what.
No: a link, a passphrase given by phone, and a browser. That is the whole workflow.
Yes. Authenticated encryption fails closed on tampering, so an altered file does not silently open.
No. Files are encrypted on your device with XChaCha20-Poly1305 before the upload starts, using keys derived locally with Argon2id. Our servers hold ciphertext only, so there is no preview, no scanning and no staff view of your transfer.
No. They open the link in any browser, type the passphrase you shared separately, and the file is decrypted locally on their machine. Nothing to install, nothing to sign up for.
Public share links always expire within 24 hours at most, and you can make them shorter, limit the number of views, or revoke them instantly. Expiry is enforced by the system, not by a reminder.
Uploads are chunked, resumable and verified after upload, so multi-gigabyte transfers survive a dropped connection, a closed laptop or a hotel network. You resume instead of starting again.
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans, so you can test a real client hand-off before paying anything.
Because we cannot read your data, we cannot reset it for you. Each account creates a Recovery Kit — a printable PDF with a QR code — to store offline. That is the same property that keeps anyone else, including us, out of your account.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
