AES-256 encryption
Files are encrypted in your browser with AES-256-GCM before they ever touch our servers. Your password, and the key derived from it, are never sent to us — so what we hold is ciphertext we have no key for. The encryption runs in code we serve, which is worth knowing if your matter is sensitive enough that you would rather encrypt it yourself first.
One-download links
Set the download limit to one. Opposing counsel clicks, receives the file, the link is dead, the content is purged. No "did anyone else get a copy?" No lingering cloud storage. Single-use discovery, every time.
Zero retention after expiry
When the link expires or hits its download cap, we delete the file. Not mark-as-deleted. Not archive. Delete. No backups, no forensic recovery, no "we found it in a staging bucket" incidents. Compliance teams love it.