Secure file hosting for the zero‑trust era
End‑to‑end encryption, passworded links, and fine‑grained access controls. Share visuals without sharing trust.
Security that scales with your team
From solo creators to global enterprises, Zettler.host keeps files confidential, controlled, and compliant.
Zero-Trust by Design
Data is encrypted in the browser before upload. Servers never see plaintext.
End-to-End Encryption
AES-GCM with per-file symmetric keys, protected by user keys and optional link passwords.
Password-Protected Links
Gate shared links behind a secret you set. Decryption happens client-side.
Ephemeral & Expiring
Set auto-expiry, revoke links instantly, or enable self-destruct on view.
Developer-first API
SDKs, webhooks, and signed upload URLs. Automate secure media workflows.
Audit & Governance
Detailed access logs, integrity verification, RBAC, and custom data residency.
Security, by default
Encrypt before upload. Least privilege access. Clear, revocable sharing.
End‑to‑end encryption
Client‑side AES‑GCM. We store ciphertext.
Zero‑trust access
Passwords, expiry, revocation.
Key control
Per‑file keys. Optional CMK/HSM.
Privacy first
No trackers. Minimal telemetry.
Time‑boxed links
Expiries and one‑time access.
Hardened infra
Isolation, patching, backups.
Ready to try Zettler.host?
Join the waitlist for early access.
Early access pricing
We’re rolling out in cohorts. Join the waitlist to reserve your spot and receive launch pricing.
Starter
Early access for individuals and small teams.
- End-to-end encrypted uploads
- Password-protected links
- Expiring & revocable shares
- Basic access logs
- Community support
No credit card required during beta.
Pro
Advanced controls for growing teams.
- Custom domains
- 2 TB encrypted storage
- Advanced audit trails
- Developer API & webhooks
- Branding & theming
Enterprise
Governance, compliance, and dedicated support.
- SAML SSO & SCIM
- RBAC & approvals
- Data residency (US/EU)
- Customer-managed keys
- SLA & dedicated support
Be first in line for Zettler.host
We’re inviting users in waves. Join the waitlist for early access.
Frequently asked questions
Do you ever see my files?
No. Files are encrypted client-side. Our servers only store ciphertext and metadata required for routing and billing.
How do password-protected links work?
We use a shared secret to derive a key that wraps the per-file key. Without the password, decryption is impossible.
What happens if I lose my key?
If you enable customer-managed keys or self-custody, we cannot recover them. Optional secure recovery and escrow (HSM-backed) is available for teams.
Can I host in the EU?
Yes. Choose data residency per-project (US, EU). On-prem options available for Enterprise.
Is there an API?
Yes. We provide REST + SDKs, presigned upload URLs, and webhooks for lifecycle events.