About Us

We've created Zbox to help applications take full ownership of their file data.

Zbox

As data leak and privacy breach is becoming a major threat to our digital assets, we need to use modern technology to protect and regain ownership of our precious data.

That's why we built Zbox.

Zbox is a new generation of zero-details, privacy-focused cloud storage for applications. Unlike other 'cloud-first' storages, Zbox takes 'client-first' approach, it shifts all operations to client side before uploading to cloud. File content is encrypted, folder structure is hidden, metadata is masked, everything is encapsulated locally in a strongly-encrypted, privacy-reserved repository.

Encryption only is not enough to protect privacy. In addition to strong encryption, Zbox packs all data in same-sized blocks, which leaves 'near-zero' details[1] to any underlying storages, including Zbox Cloud Storage. By using this approach, only application itself can hold the key and have access to their private data.

Back to 2017, Zbox was at first released on GitHub as a side project. With many rounds of refactoring and improvements, Zbox is now evolved to be a full-functional production ready cloud storage. Its amazingly safe and secure file data protection capability attracted an active user base around the world.

We believe that encryption and privacy reserving can protect us from being victim of malicious attackers. Thus, we made our #1 goal to give you back full control of your data, and help you keep it as much private and secure as possible.

[1] Zbox doesn't use any Private Information Retrieval or Oblivious Transfer protocol to implement the cryptographic "zero-knowledge" storage. Underlying storage still knows some information about your app's data, but it is very limited and no data content will be exposed. In terms of Zbox Cloud Storage, the server knows:

  • When the data has been accessed
  • Accessed by which user account (email address) and IP address
  • Which block (randomised block id) has been read or written
  • Total size of the data
  • Network traffic and total number of requests, including download and upload