ShareBolt is a zero-knowledge file transfer platform that encrypts your files on-device before they ever leave your hands — then routes them through the closest Cloudflare edge node directly to your recipient, whether that's a human user, a remote team, or an autonomous AI agent. There are no file size limits, no server-side decryption, and no compromise on compliance.
Every ShareBolt transfer follows a six-stage cryptographic pipeline. Each stage is designed to ensure that no plaintext data — and no encryption key — ever touches a server you don't own.
Select any file or folder from any device: a 4K video from your iPhone, a 200 GB model checkpoint from your Linux workstation, or a document from your web browser. ShareBolt imposes no format restrictions and no per-file size caps. Drag-and-drop, folder upload, or CLI — all supported.
Before a single byte leaves your device, ShareBolt runs AES-256-GCM encryption entirely on-device using the Web Crypto API (browser) or native crypto primitives (desktop/mobile). Your encryption key is derived from your vault passphrase using PBKDF2 — it is never transmitted to ShareBolt infrastructure, ever.
The encrypted ciphertext is tokenized with a stable blind index — a deterministic hash that allows the ShareBolt search layer to locate your file without knowing its content. File names, MIME types, and metadata are encrypted separately. The server sees only opaque ciphertext blobs and anonymous index tokens.
The encrypted payload is routed to the Cloudflare edge node geographically closest to the originating request. If you are subject to GDPR, EU data residency headers ensure the file never transits a non-EU zone. HIPAA and CCPA routing rules can similarly be enforced at the header layer, automatically.
The recipient — whether a human, a remote team member, or an autonomous AI agent — receives the encrypted blob. Their client (browser, app, or SDK) decrypts it locally using the shared vault key or a one-time transfer token. No plaintext ever exists on ShareBolt infrastructure at any point in the delivery chain.
Every transfer event — initiation, routing decision, delivery confirmation — is appended to an immutable cryptographic ledger as a hash-chained block. This tamper-evident audit trail satisfies SOC2 Type II, HIPAA, and GDPR audit requirements without storing any plaintext event data.
ShareBolt is engineered for true cross-platform coverage. Whether your team runs iOS in the field, Linux on inference servers, or Windows in the enterprise — every transfer is protected by the same AES-256-GCM pipeline.
Flutter app with background transfer support, Face ID vault unlock, and native iOS share sheet integration.
Flutter app with background transfers, biometric authentication, and Android share sheet support.
Native desktop client with shell integration for drag-and-drop vault uploads.
Flutter desktop app with menu bar integration and Apple Silicon hardware acceleration.
CLI and daemon modes for headless servers, CI/CD pipelines, and AI inference nodes.
Zero-install experience in Chrome, Firefox, Safari, and Edge via the Web Crypto API.
ShareBolt's BYOS (Bring Your Own Storage) architecture eliminates size restrictions by routing encrypted payloads directly to your own cloud storage backend — whether that's Cloudflare R2, AWS S3, or Azure Blob. ShareBolt never buffers your file on shared infrastructure. This means a 10 TB genomics dataset and a 200 KB config file go through the same encrypted pipeline with zero per-file overhead.
For teams without dedicated storage, the Standard Shield tier provides up to 2 GB per transfer using ShareBolt-managed encrypted storage — sufficient for most document, code, and media workflows. Upgrade to Pro Vault or Enterprise Citadel to unlock unlimited file sizes and bring your own storage bucket.
Modern AI pipelines don't just move data between humans — they move it between autonomous agents. A Claude worker generating a report needs to hand that file to a GPT-4 summarizer, which then delivers it to a n8n webhook node that archives it in a compliance bucket. This entire chain requires a file transfer protocol that understands agent identity, has no GUI dependency, and enforces security boundaries automatically.
ShareBolt's Agent SDK gives each AI agent a cryptographic DID (Decentralized Identifier) for authentication, a sandboxed directory allow-list so no agent can read files outside its approved scope, and a daily byte quota to prevent runaway data exfiltration. Transfers between agents are zero-knowledge encrypted end-to-end and logged to the immutable ledger — making them auditable even in fully automated pipelines. Every major LLM platform is supported out of the box.
BYOS removes storage caps. Individual file size limits still apply per plan (25 GB for Pro, unlimited for Enterprise with BYOS). Standard Shield supports up to 2 GB per transfer.
Yes. The web interface runs entirely in modern browsers using the Web Crypto API for on-device encryption. No plugin or extension needed. Native apps are also available for Windows, macOS, Linux, iOS, and Android.
AI agents authenticate with Ed25519 DID cryptographic identities via the ShareBolt Agent SDK or REST API. Each agent operates in a sandboxed file path with a daily byte quota. Supported: Claude (MCP), GPT-4 (function calling), Gemini (tool use), and any LLM via REST.
Yes. AES-256-GCM encryption runs entirely on-device before upload. Keys are derived locally via HKDF-SHA256 and never transmitted. No ShareBolt server or employee can access plaintext file content at any stage.
Currently Cloudflare R2. S3, Azure Blob, GCS, and MinIO are on the roadmap. ShareBolt encrypts before writing to your bucket, so your cloud provider also never sees plaintext. You retain full data ownership.
Pro and above plans can set expires_in_seconds=0 to create permanent links that never expire. Standard Shield links expire after 7 days. Enterprise supports policy-enforced expiry rules per team or compliance zone.
Yes. Recipients get a one-time secure download link. They decrypt the file in their browser using the shared key with no account required. For agent-to-agent transfers, both ends need an API credential or DID identity.
On Ledger Guard and Enterprise plans, every transfer is written to an immutable SHA-256 block chain ledger. The ledger records sender, recipient, file hash, region, and timestamp. Any tampering breaks the hash chain and is immediately detectable.
ShareBolt uses chunked uploads with resumable transfer tokens. If a connection drops, the transfer resumes from the last verified chunk. Each chunk is individually integrity-verified with SHA-256 before the token advances.
No credit card required. Unlimited transfers on the free tier up to 2 GB. Upgrade any time for BYOS and agent workloads.
