Honest pricing. No free plan.

Free tiers exist because someone else is paying — usually through advertising, data resale, or a freemium funnel that prods you toward an upsell. Nullsend's whole positioning is "we don't do any of those things," which means subscriptions are the only revenue model on the table. The 14-day money-back guarantee on your first month is how we de-risk the decision instead.

Overage is billed at £0.05/GB/month, pro-rated by hour, charged on your next invoice. You'll see live usage and projected overage in the admin dashboard. If you want a hard ceiling instead of overage charges, you can set one — uploads are blocked at that point and admins are emailed.

Overage exists because we'd rather you keep working than have transfers fail mid-upload. But you're in control of whether to allow it.

Yes. Upgrades take effect immediately and are pro-rated on your next invoice. Downgrades take effect at the next billing cycle, with any pro-rated credit applied to your next invoice. There's no upgrade/downgrade fee.

If you switch annual to monthly mid-year, the remaining time on your annual stays at the annual rate; we don't claw back the discount.

Existing transfers stay accessible to recipients for their normal expiry period. No new transfers can be created. All data is permanently deleted 30 days after your final transfer expires. You can also request immediate deletion under GDPR Article 17; we'll complete the deletion within 30 days.

It means files are encrypted in your browser before upload, using AES-256-GCM with a key generated in your browser. The decryption key travels in the share URL fragment — which by web standards never reaches our servers. We store ciphertext we have no way to read.

This isn't a policy promise we could revoke. It's a structural property of the cryptography. For the technical detail, see our security page.

Yes, on every plan. A pre-prepared DPA covering UK GDPR, EU GDPR, and UK Data Protection Act 2018 is available before you sign up and downloadable from your admin panel. Enterprise customers can negotiate custom Standard Contractual Clauses if their compliance team requires it.

Email hello@nullsend.io for a copy in advance of signup.

Encrypted file ciphertext is stored in the European Union — specifically, our object storage provider's EU-Central region, in Amsterdam. Tenant metadata sits in a PostgreSQL database in the UK. Neither location holds plaintext files because we never have plaintext files.

The full sub-processor list is on our security page.

Yes, in three ways. The link expires (every transfer has an expiry). The recipient loses the URL (we can't recover it — that would require a backdoor we don't have). The sender manually expires the transfer from the admin UI.

"Lose the link, lose the file" is a feature, not a bug. Any architecture that lets us recover a lost link would also let us read your files in other ways.

No. We can't — the files we store are encrypted ciphertext, indistinguishable from random bytes. We have no way to inspect them. Recipients should scan files on download with whatever tool they normally use.

This is the trade-off side of "we can't read your files." For our target market (legal, healthcare, agencies sending finished work to known recipients), it's not a meaningful trade-off; the recipient already knows what they're being sent.

Honest answer: existing transfers would honour their expiry; no new transfers would be possible. You'd export your audit log (CSV, available from the admin panel) and the architectural model means there's no Nullsend-held data of yours to lose other than transfers in flight.

The relevant risk-mitigation is that we're a UK company, billed in GBP, with EU-resident infrastructure that's transferable to a successor without re-encryption. We aim never to test this answer in practice, but it's a reasonable question to ask.

Yes, on Enterprise. Custom DPAs, custom Standard Contractual Clauses, custom SLAs, custom audit log retention up to seven years, annual billing only. Volume discounts available for genuinely large deployments.

Email hello@nullsend.io with what you need and we'll come back within one business day.