Security & reliability

Private by design, hosted in the UK, and built to stay up.

Zero-knowledge

Free transfers and your private drive are encrypted in your browser. The server stores only ciphertext and never receives the decryption key — it travels in the share link's #fragment. We cannot read your files, and we cannot re-send a link because we don't hold its key.

Encryption at rest & UK hosting

Stored data is encrypted at rest on hardware we operate in the UK — so it isn't exposed to overseas cloud regimes. CloudBox is GDPR-compliant by default.

Never-down storage

Every write is mirrored across storage nodes with automatic failover. If a node goes down, another serves your reads instantly and queued writes reconcile when it returns — the service stays available throughout.

The AI zone

AI access is limited to a clearly-labelled, opt-in AI folder — the only server-readable area. Connections are scoped, every read/write is audit-logged, and you can revoke access at any time. Keep private material out of AI folders.