Privacy isn't a feature — it's the foundation

All data is encrypted using AES-256-GCM before storage. Only you hold the keys — not even we can read your data.

We never see, store, or process your unencrypted data. Your privacy is guaranteed by design, not by policy.

Three layers of security: password, TOTP authenticator, and device/IP verification protect your account at every step.

Intelligent rate limiting and automatic account lockout after failed attempts stop brute-force attacks before they start.

Every login, password change, and security event is logged with timestamps and IP addresses for complete accountability.

Sessions automatically lock after 5 minutes of inactivity. Leave your device unattended — your data stays protected.

HSTS, X-Frame-Options DENY, strict referrer policies, and permissions controls block clickjacking, XSS, and protocol downgrades.

Passwords must meet strict complexity requirements: 12+ characters with uppercase, lowercase, numbers, and symbols.

Up to 20 TB of cloud storage powered by Cloudflare's global network. Every file is AES-256 encrypted server-side before upload — unreadable even if storage is breached.

Workspace members fall into Owner / Admin / Member / Viewer roles, each with surgical permissions on every resource. Owners can force 2FA and session timeouts org-wide.

Immutable, tamper-resistant log of every login, share, upload, delete, role change, AI message and admin action. Filterable in-app, CSV export anytime, SIEM streaming on Enterprise.

Bring your own AWS KMS, GCP KMS or HSM-backed key. Atomic key rotation, customer-controlled revocation. Our engineers cannot decrypt your data — by design.