Private storage, without the profile.

Encrypted cloud storage for people and teams who would rather share less. No customer KYC, no trackers, no inflated promises.

Create your vault Explore object storage

The Cloak Drive file browser showing encrypted files and folders with a storage meter and activity panel

No customer KYC Minimal account data Encrypted before storage Predictable pricing

Storage should know less about you. Cloak keeps the public gateway between you and the physical storage layer, encrypts data before it lands, and gives private-drive users a mode where even Cloak cannot read their files.

Privacy, precisely stated

Know what is encrypted, where it happens, and which metadata still exists. No anonymity theater.

Built around bandwidth

Chunked, resumable transfers move through a high-speed gateway without staging enormous files on disk.

Keys with boundaries

Per-customer and per-object keys limit exposure. The storage operator never receives decryption keys.

Your files.
Quietly yours.

Cloak Drive is the private home for photos, documents, and backups, with desktop sync that resumes in the background.

A file selected in Cloak Drive with its details panel open, showing type, size, and client-side encryption on this device

1.0Background sync

1.1Pause, resume, and automatic retry

1.2Recovery-key protected private mode

1.3Expiring and password-protected links

Object storage
with fewer surprises.

S3-compatible storage for backups and applications, with simple pricing and gateway encryption before data reaches the private backend.

Request Object access

The Cloak object-storage console listing private S3-compatible buckets with the account's S3 endpoint

2.0AWS Signature V4

2.1Multipart uploads

2.2Presigned URLs

2.3Versioning and lifecycle rules

Encrypted before
the storage layer.

The physical storage operator receives ciphertext with randomized object identifiers. Cloak Private Drive adds client-side encryption, so plaintext never reaches our gateway.

Read the security model

Your devicePlaintext stays here in Private Drive

Client-encrypted

Cloak gatewayAuthentication, limits, encrypted routing

Private tunnel

Storage layerRandomized encrypted blobs only

Private DriveClient-side encrypted. Cloak cannot decrypt file contents.

Object storageGateway encrypted. Standard S3 clients work normally.

Envelope encryptionSeparate customer and object keys reduce blast radius.

Plans that scale
without surprises.

Start small, move up when you need to, or pay only for what you store. Found a lower price? Contact us and we guarantee that price point, for life.