Your work, kept somewhere serious.

Your files live in Amsterdam

We had a choice about where your files would live, and we did not make it on price. They sit on Backblaze B2, a serious, modern object store, in a data centre in Amsterdam — which is to say in Europe, where a European studio’s work belongs and where, under our hand, it stays. We pin the region deliberately, so your files are never quietly shuttled across an ocean to wherever capacity happens to be cheapest that week; they stay put, in a jurisdiction you can name.

The store is built to keep your bytes intact across its own infrastructure, without you ever having to think about it, and we chose the home we would happily trust with our own work before we put yours there. The same instinct that makes us fuss over a single dropdown made us fuss over this.

Our own AI, that trains on nothing

To make your files findable, Spaces does a little quiet work on each one — lifting the key facts from a document, a date, an invoice number, who it is from, much as a receipts app reads the total off a receipt, and describing what is in a photo so that months later you can search for it by what you actually saw. That work is done by our own AI — and we mean that more literally than most. When a product says “our AI”, it usually means one of the big names in a thin shell, your files quietly forwarded off to be read by someone else’s machine. Ours is an actual open model, one we host and run ourselves. Your work never trains a model, ours or anyone else’s; it is not mined, not profiled, and not sold. It is looked at to be useful to you, the once, and then forgotten.

Owning the model is the whole point: it is what lets us promise that your files are here to serve you and only you — never someone’s training data, never someone’s advertising. The privacy comes from how the thing is built, not from a line in a policy.

Encrypted, coming and going

Everything travels to and from Spaces over TLS, so the connection between your machine and your files is always encrypted. At rest, the store encrypts every object it holds. Downloads and previews are served through short-lived, signed links that expire on their own, rather than through public URLs that linger.

Access that follows how you delegate

Permissions are built around how studios actually hand work around, not around an org chart. Clients see what they were sent, freelancers see what they were brought on for, and account leads see everything. A whole area can be sealed to its owner alone, invisible to the rest of the team, for the work that is not for the room. Share links are long, unguessable capabilities you can revoke at any moment, and a link can be set to expire on a date you choose.

A trail you can read back

Every meaningful action — an upload, a move, a share, a deletion — leaves a record, so a year later the question of who did what, and when, has an answer rather than a shrug. And nothing is lost to a slip of the hand: anything deleted, file or folder, moves to a recoverable trash and can be restored for thirty days before it is purged for good.

Privacy and GDPR

We are GDPR-compliant and act as your data processor, under a Data Processing Agreement that sets out exactly what we may and may not do with your files. We keep the list of sub-processors short and documented, and the full detail lives on the privacy and DPA pages, where it belongs.

Honest about where we are

We are a small, careful team, and we would rather tell you the truth than wave a wall of badges at you. What is written above is real and in place today. The formal certifications that larger buyers eventually ask for — the audits and the acronyms — are on the road ahead as we grow into them, not claimed before their time. If you have a specific requirement, write to us and we will give you a straight answer.