← All features

Security

Security is enforced on the server, not just hinted at in the UI.

Implemented

  • ✓Private storage with short-lived signed download authorization
  • ✓Object-level access checks on every operation
  • ✓Audit logging for sensitive events
  • ✓Rate limits on login, public links, and requests
  • ✓Filename sanitization and safe preview handling

Planned

  • ◔Malware scanning (files isolated until a scanner is integrated)
  • ◔Customer-managed encryption keys

Planned items are not yet available and are not billed as complete.