Sealed by default
Files are encrypted in the browser before upload. Keys are sharded, shared among guardians you pick, and rotated on a schedule you control.
Zero-knowledge · In preview
Sealed work for teams who build in the dark.
Nimbus encrypts every file, stroke, and comment in your browser before it ever leaves the room. Circular keys, no trails, nothing to subpoena.
AES-256-GCM · CLIENT-SIDEZERO-KNOWLEDGE STORAGEKEYS NEVER LEAVE DEVICE
Features
Armor you never have to think about
Zero-knowledge core
We store ciphertext and nothing else. Not filenames, not titles, not the shape of your work — there is nothing on our side worth reading.
Vanishing ink
Drafts, comments, and share links self-destruct on a timer. When a seal burns, it burns everywhere — including the logs.
Method
Three rites, no ceremony
Forge your seal
Create a workspace and mint its key on your device. It never travels unencrypted.
Work in the dark
Invite by alias, edit, and ship — every byte wrapped in client-side encryption end to end.
Burn the trail
Archive or dissolve a workspace and its key shards with one command. Permanently.
Pricing
Choose your pact
Initiate
$0
FOREVER · SOLO
- 1 sealed workspace
- 5 GB ciphertext
- 7-day vanishing links
Adept
$18
PER USER / MONTH
- Unlimited workspaces
- 500 GB ciphertext
- Custom key rotation
- Priority guardian support
Cabalist
$49
PER USER / MONTH
- Bring-your-own keys
- On-prem relay
- SSO + audit seals
Witnesses
Sworn statements
“We moved an entire campaign under Nimbus the week our old vendor got breached. Nobody saw our work before launch day. Nobody.”
Vex CorrinArt Director, Hollowframe Studio
“The only workspace our auditors approved without a single exception. The key ceremony took four minutes.”
Ines ValaSecurity Lead, Ninefold Labs
FAQ
Questions under oath
Can Nimbus staff read anything I store?
No. All encryption and decryption happens in your browser. Our servers hold ciphertext, and the keys are sharded on your devices. There is no master key, no backdoor, and no way for us to open a seal even under legal pressure.
What happens if I lose my key?
At setup you appoint guardians — teammates or offline copies — who each hold a shard. Any quorum you define can re-mint your key. If you lose the key and the quorum, the workspace stays sealed forever. That is the trade for true secrecy.
Does vanishing ink really delete everything?
Yes. Expired content is cryptographically erased: ciphertext is overwritten, key shards are destroyed, and share links return a dead seal. Our logs never contained plaintext to begin with, so there is nothing left to leak.
Mint your first seal
Preview access opens in small cohorts. Leave an email — we never share it, and we can’t read your workspace anyway.