Live proof

See exactly what our servers see.

Type any text on the left. We encrypt it on your device in real time. The right pane shows the opaque ciphertext — that's literally all DRIVUNO ever stores.

Your device (plaintext)stays here

58 chars · 62 bytes Never transmitted

XChaCha20-Poly1305

Our servers (ciphertext)—

Entropy: 0.00/8 What we store

A fresh random key is generated for every encryption

Your key is never sent to our servers. Without it, the ciphertext on the right is indistinguishable from random noise — even with infinite compute.

Nonce (24 bytes)

—

Symmetric key (32 bytes)local only

—

Authenticated encryption

Poly1305 MAC tags detect any tampering. A single flipped bit makes decryption fail safely.

Zero metadata leakage

Filenames, sizes and timestamps are encrypted with the file payload — not stored in plaintext columns.

Forward secrecy on shares

Each public link uses an ephemeral X25519 keypair. Compromising one link cannot expose any other.

What you can verify yourself, today

These are not promises to take on faith — each one is something you or an auditor can check independently, right now.

DevTools network inspection
Open your browser's Network tab during an upload or download: only ciphertext leaves the device, never plaintext.
Share link fragments
The decryption key for a public share lives after the # in the URL. Fragments are never sent to any server by design — inspect the requests to confirm.
Public release manifest
The published release log lists what shipped and when, so you can match what runs in production against what was announced.
Subprocessor register
A public, kept-current list of every subprocessor that touches infrastructure or metadata.
Retention register
Published schedule of how long each category of data is kept before deletion or purge.
Downloadable, signable DPA
A GDPR data processing agreement you can download and sign without contacting sales.
CI privacy gate
Our automated test suite includes a gate that fails the build if any code path would let unencrypted content leave the browser.

This page runs entirely in your browser. Inspect network in DevTools to verify — no request carries your plaintext.