Built to be reasoned about, not just trusted
We favor open protocols, server-side authority, and boring, well-understood cryptography. Here is what protects your account and your files.
Tenant isolation
Each account's files live under a dedicated, server-side storage root. Path handling rejects traversal, so one account can never read or write another's data - verified by automated isolation tests.
Separate drive credentials
Mounting never uses your website password. You issue dedicated drive credentials, see them once, and can rotate or revoke them instantly if a device is lost.
Strong password hashing
Account passwords are hashed with Argon2id using per-password salts. We never store or log your plaintext password, and verification is constant-time.
Encrypted transport
All traffic - the website, the API, and the WebDAV endpoint - is served over HTTPS. Credentials are only accepted over secure connections.
Least-exposure architecture
We never reveal where your files physically reside. Storage locators stay server-side and are not exposed through the API or the drive protocol.
Idempotent, auditable operations
Billing and provisioning events are processed exactly once and recorded. Sensitive account actions write audit entries so changes are traceable.
Responsible disclosure
Found a security issue? We want to hear from you. Email support@nivodisk.example with details and steps to reproduce. Please give us reasonable time to remediate before any public disclosure.