Arcanum 2.0 · Zero-Knowledge Team Storage

One storage bucket.
Unlimited team members.

Connect your own AWS S3, Cloudflare R2, or Google Cloud bucket. Invite your entire team without paying per-seat storage fees. Every transfer is encrypted on-device and logged for your admin.

Client-side AES-256Zero egress with R2End-to-end audit logsNo storage markupsSOC 2 ready architecture
Real-Time Visibility & Control

Monitor team sharing. Know where every file went.

Every internal and external transfer is logged with timestamps, recipient details, and download events. Need to pull back a document? Revoke the link with one click.

AES-256 Client Encryption
Transfers Tracked
1,429
Past 30 days
Active Storage Buckets
6 Buckets
AWS S3 & Cloudflare R2
Watermarked Shares
892 Files
Tracked to recipient
Revoked Links
1 Links
Access disabled
Arcanum Console Interface
File integrity verified: SHA-256 fingerprint generated per transfer

Recent Activity

Live Sync
Q3-Financial-Summary.pdf
Just now
To: audit@partner-firm.com3.4 MB
Delivered
Partnership-Agreement.docx
4 min ago
To: legal@counsel-corp.com540 KB
Opened
Client-Strategy-v2.pdf
22 min ago
To: contractor@freelance.org12.8 MB
Downloaded
Database-Backup-Config.env
1 hr ago
To: staging@external-qa.net18 KB
Access Revoked
Audit trail retained according to org policyExport CSV
The Per-Seat Markup

Why pay per user for storage they rarely touch?

Traditional platforms like Google Workspace and Dropbox charge $15–$25 for every employee in your organization. Arcanum replaces per-seat pricing with a flat platform fee on your own bucket.

$4,800+

Per-seat license fees

Average annual cost for 20 seats on business cloud storage, even for employees who only open a file occasionally.

Untracked

Shadow file sharing

When team members use personal emails or messaging apps to share files, IT admins have zero record of downloads or leaks.

$0 extra

Arcanum flat model

Add as many team members as you need. Everyone accesses the same storage bucket with full admin audit logging.

Simple Setup

Up and running in 3 minutes.

No files to migrate. Keep your existing cloud accounts and start sharing immediately.

01

Connect your cloud bucket

Provide your S3, Cloudflare R2, or Google Cloud credentials. Arcanum connects using client-side encryption keys.

02

Invite your teammates

Add your entire company without per-seat charges. Set permissions, user roles, and storage quotas.

03

Share and track transfers

Every transfer is logged. Add recipient watermarks to sensitive PDFs and revoke access anytime with one click.

Supported Storage

Bring your own storage bucket.

Arcanum connects to any S3-compatible cloud provider. Your files stay in your own bucket under your credentials — we never markup storage or charge egress fees.

Connects in 2 minutesEncrypted credentials
Cloud Storage Architecture
Direct Client-to-Bucket Encryption
Files are encrypted locally on the sender device before streaming into Cloudflare R2.

Cloudflare R2

S3-compatible object storage with zero egress bandwidth fees.

Egress cost: Free egress ($0.00)
Zero egress fees worldwideDrop-in S3 API compatibilityFast edge latency
config.json
{
  "Bucket": "my-company-storage",
  "Endpoint": "https://<account_id>.r2.cloudflarestorage.com",
  "AccessKeyId": "CLOUDFLARE_R2_KEY",
  "SecretAccessKey": "••••••••••••••••••••"
}
Endpoint: https://<account_id>.r2.cloudflarestorage.com
Connect bucket free
Architecture Comparison

How Arcanum compares to traditional cloud storage.

Traditional Cloud Vendors

Google Drive / Dropbox / Box

  • ✕Requires a license for every employee in your organization ($15–$25/mo/user)
  • ✕Vendor hosts and processes your unencrypted files on their servers
  • ✕High migration overhead and locked-in proprietary workflows
  • ✕No way to trace who leaked a downloaded document
  • ✕Limited visibility beyond aggregate storage quota
Arcanum Model

Flat Platform on Your Cloud Bucket

  • ✓One flat monthly fee covers unlimited team members
  • ✓Files are encrypted on your device and stream directly into your bucket
  • ✓Switch between AWS S3, Cloudflare R2, or MinIO anytime with zero lock-in
  • ✓Forensic watermarking identifies the recipient if documents are leaked
  • ✓Full admin audit trail of all shares, opens, and downloads
Zero-Knowledge Security

Encrypted on your device.
Keys never reach our servers.

Files are encrypted locally in your browser using AES-256-GCM. The decryption key is carried in the URL hash fragment (#key), which browsers never send over HTTP requests.

Client-side AES-256-GCM

Unencrypted files never touch the network. All encryption happens locally in the browser before bytes are sent.

URL fragment key delivery

Decryption keys live in the URL #fragment, making them invisible to servers, proxies, and intermediaries.

Forensic leak watermarking

Embed recipient email and timestamps into PDFs so any leaked screenshot or document is traceable.

Flat Platform Pricing

Predictable flat pricing. No per-seat storage markup.

Arcanum charges a flat fee for the platform. Connect your own storage bucket and invite your entire team without paying an extra $15–$25 for each user.

Estimate Your Savings
35 people
5 members50 members100 members200 members
Typical per-seat SaaS:
$8,400 / yr
At ~$20/user/mo
Arcanum flat plan:
$288 / yr
Flat for all 35 users
Estimated annual savings
$8,112 / year

Instead of paying each month for unused storage quotas, you keep storage in your own cloud bucket and eliminate per-seat licensing.

No migration requiredStart free trial

Free

For individuals and small teams getting started.

$0/ forever
  • 1 connected storage bucket
  • Up to 3 team members
  • Client-side AES-256 encryption
  • 7-day transfer activity log
  • 5 GB file transfer limit
  • Forensic watermarking
  • One-click link revocation
  • Custom domain
Start free

Pro

For boutique firms needing leak protection and audit logs.

$10/ flat / month
Billed annually ($120/yr)
  • 3 connected storage buckets
  • Up to 25 team members
  • Unlimited file sizes
  • 1-year audit log history
  • Forensic recipient watermarking
  • Remote link revocation
  • Tamper-proof transfer receipts
  • Custom domain
  • SAML SSO
Start Pro trial

Team

Most Popular

Unlimited team members. Replace all per-seat storage fees.

$24/ flat / month
Billed annually ($288/yr)
  • Unlimited team members (no per-seat fees)
  • Unlimited storage buckets
  • Unlimited transfer bandwidth
  • Permanent audit log retention
  • Org admin console & user management
  • Forensic watermarking & verification
  • Custom company domain
  • Priority support
Start Team trial

Enterprise

For organizations with compliance, self-hosted, or SSO needs.

Custom
  • Self-hosted MinIO or air-gapped deployment
  • Customer-managed encryption keys (BYOK)
  • SAML SSO & SCIM directory sync
  • SIEM log streaming (Splunk, Datadog)
  • Custom DPA and compliance documentation
  • Dedicated account manager & 99.9% SLA
Contact us

Stop paying per seat for cloud storage.

Connect your AWS S3, Cloudflare R2, or Google Cloud bucket. Add your team. Average setup takes under 3 minutes.

No credit card required · SOC 2 Ready · GDPR ready · Cancel anytime