The file is sealed on your computer
When you add a file, the app on your own machine makes a random key and locks the file with it (AES-256-GCM, in 64 KB pieces). The file name is locked too. Nothing has left your computer yet.
Four steps. The first one is the whole idea: a file is sealed on your computer before it goes anywhere. Everything after that is a server moving boxes it cannot open.
When you add a file, the app on your own machine makes a random key and locks the file with it (AES-256-GCM, in 64 KB pieces). The file name is locked too. Nothing has left your computer yet.
That random key is then locked to your identity with X25519 plus ML-KEM-768, the post-quantum standard. We call the result an envelope. Recording the traffic today and decrypting it with a quantum computer later does not work.
The sealed file and the envelope are uploaded to a server you run. It writes both to disk. It never sees the key, the file, or the name. All it holds is a hash, a size, and who is allowed to fetch it.
To share with a teammate, your app opens the file key on your machine and seals it again for their identity. That new envelope goes to the server. They can open it; nobody else can, including the server and including us.
Your identity is a small encrypted file on your device, locked with your password. The server never has the password and never has the identity, so there is no password reset. The apps push you to back the keystore up on day one, because losing both the file and the password loses your files for good.
The safety net. Your admin creates three recovery shares offline. Any two of them, held by different people, can rebuild a recovery identity that opens every user's envelopes. One person alone cannot. Neither can we.
One binary. Sealed files plus a small database on local disk. Serves the two web apps below on port 8080. Put your own TLS in front.
Where staff sign in, upload, download, and share. All sealing runs in the browser (WebAssembly).
Users, seats, roles, policies, audit log, license, recovery, support.
Same job as the web vault, native. Windows and Linux on request.
Seats, tier, expiry, signed by us. The server checks the signature offline. No phone-home.
We sell the license and answer support. We hold no files, no keys, no passwords.
That second list is the product. The full threat model, the primitives, and the things we deliberately do not protect are on the Security page.