Sharing & Collaboration
Secure collaboration while maintaining privacy.
Sharing Options
Encrypted Export
Share encrypted document bundles:
- Select documents or folders
- Set a share passphrase
- Export encrypted package (no filenames in plaintext)
- Send via any channel
- Recipient imports with the passphrase
Share Links (cloud-enabled)
- Password-protected, time-limited links
- Allowed emails/domains and download limits
- Audit trail for views/downloads
- Works with App-Managed storage or BYOS
- Configure access requests; approve/deny in-app
- Revoke links or rotate passwords at any time
Team Vaults
Shared knowledge bases per team:
- Role-based access control (org + team roles)
- Audit logging with zero-knowledge events
- Centralized key management (team keys; optional compliance escrow)
- Encrypted cloud sync (App-Managed or BYOS)
- Team Admins control member permissions (view/upload/download/share/delete); Org Admins may have oversight in Compliance Mode.
Security Model
All sharing maintains zero-knowledge:
- Data encrypted before transmission
- Recipients need your passphrase
- No plaintext in transit
- You control access revocation
Offline vs Cloud
- Offline-only: use encrypted export packages; no internet required.
- Cloud-enabled: share links with email/domain allowlists, expiry, and download limits; filenames stay encrypted.