Nullsend is the white-label file transfer platform that physically cannot read your files. End-to-end encrypted in your browser, before anything leaves your device.
Nullsend's architecture means certain things are not just policy-restricted — they're cryptographically impossible. That's the entire product.
Files are encrypted in your browser before upload. Our servers see only ciphertext.
You can't train on what you can't see. No model, ours or anyone else's, gets your data.
A subpoena gets ciphertext and metadata. Useless without the key — which we never have.
No thumbnails. No previews. No virus scanning. These trade-offs are the point.
Lose the link, lose the file. Forever. By design — anything else is a backdoor.
Architectural guarantees don't depend on a Terms of Service we could change next year.
The key is generated in your browser, lives in the share URL, and is never transmitted to Nullsend. This is how end-to-end encryption is supposed to work.
When you drop a file in, your browser generates a random 256-bit AES key and encrypts each chunk locally. The plaintext never leaves your device.
Encrypted chunks stream directly to EU-resident storage. Our servers store ciphertext and metadata. We see what you uploaded, not what's in it.
The decryption key lives after the # in the share URL. By web standards, fragments never reach the server. Share the URL; only the recipient can decrypt.
Everything you'd want from a modern file transfer platform, with the architectural guarantee that we cannot read what passes through.
Your subdomain, your brand, your colours. Recipients see files.yourfirm.com — not ours.
Industry-standard authenticated encryption. WebCrypto-native. No custom crypto, no rolled-our-own anything.
Ciphertext stored in EU-Central. GDPR-compliant by architecture. DPA available before signup.
Files self-destruct on a schedule you set — 7, 30, 90 days, or on first download. No manual cleanup.
Add a recipient password for two-factor access. Stretched with Argon2id; we still can't see the key.
Admin, sender, and view-only roles. Per-user audit log of who sent what — never of what's in it.
Recipients get email from your-firm@, not noreply@nullsend. Custom SMTP on Growth and above.
Flat monthly per tier. Overage at £0.05/GB. No tracking pixels, no upsells, no surprise renewals.
Join the early-access list. We'll email you when accounts open in Q3 2026, and you'll get 20% off your first three months as a founding customer.
No spam. No third-party tracking. Unsubscribe in one click.