1. Zero-Trust Architecture
ZecMesh is a Zero-Trust application. We assume the network is always hostile, which is why your
data is encrypted client-side before it ever leaves your device. Even during
transit, SSL encryption provides an additional layer of security for the upload process.
2. Yggdrasil Mesh Transport
Each encrypted file chunk is routed through the Yggdrasil Network, an end-to-end
encrypted IPv6 mesh network. This ensures that the path from your device to our storage nodes is
cryptographically secure and decentralized.
3. Double-Layered Encryption
Your files are protected twice: first by your private client-side key (AES-GCM 256-bit) and
second by Encryption-at-Rest on our storage drives. Even if a physical drive
were compromised, your data remains a useless cipher.
4. Ephemeral Lifecycle
Set a download limit (1-3). Once reached, the file manifest and all associated chunks are wiped
permanently from the mesh, leaving zero trace of the data.
"Privacy isn't a
feature, it's a fundamental human right."
