Why we exist

Your files
belong to you.

Privacy isn't a feature you find in a settings menu. It's the starting position. Everything we build follows from that.

Start a 14-day trial How it works

14-day free trial. Start it with a card or iDEAL; no charge until day 15, cancel any time before.

Live demonstration

~/work/strategy.md 362 B · plaintext

on your device

Q3 strategy — board copy

Headcount targets: 14 ENG, 4 SEC, 2 PM.

Burn target: €312k/mo by August.

Customers: 1,840 accounts · 96% renewal rate.

Confidential — do not distribute.

AES-256-GCM

what we store

Reading file...

AES-256-GCM

Key on device

Password never sent

Zero-knowledge we cannot read your files

EU-based EU law, no US Cloud Act

Open source every client is auditable

Encrypted on device before bytes leave you

The problem

Access for data.
That’s the deal
most clouds make.

Your files, your filenames, your patterns — traded for storage access. It doesn’t matter whether you’re on a free plan or a paid one. The arrangement is the same.

We think that’s the wrong trade.

Most cloud providers see

tax-2025.pdf

passport-scan.jpg

family-photos/

medical-results.docx

Beebeeb sees

4f9e2a01b7c8a93f.enc

e22b1c0a749d83bf.enc

a09c4f7e2bd1880a.enc

7c12af0e9ba33e5d.enc

Our approach

We cannot read
your files.

Files are encrypted on your device with a master key only you hold. Your password unlocks that master key locally and never leaves your device — we never see your password, your master key or your 12-word recovery phrase. Lose the password and the phrase, lose the data. No backdoor, no exceptions. Encryption happens before anything reaches our servers in Europe — so a breach there leaks only ciphertext.

That trade is the whole point.

AES-256-GCM

industry-standard encryption

12 words

your recovery key

Open source

audit it yourself

What it does

Privacy that works. Features that don't cut corners.

Every feature starts from the same constraint: we cannot read your files. Everything built on top of that is designed to stay honest about it.

End-to-end encrypted

Files are encrypted on your device before they leave it. The server receives ciphertext. Nothing else.

AES-256-GCM · on device

Zero-knowledge — mathematically

Your master key lives in your 12-word recovery phrase, not on our servers. We can't read your files. The architecture makes it impossible, not just against policy.

No backdoor · no exceptions

Passwordless, hardened login

Sign in with a passkey — nothing to phish, nothing to leak. Add TOTP two-factor for a second layer. Your account is as locked down as your files.

Passkeys · TOTP 2FA

File requests

Send a link, let someone upload to your vault. You receive the files encrypted. The person uploading never sees what else is there.

Collect files · stay private

Open source clients

Every client is open source. If we said one thing and shipped another, the code would show it.

Audit it yourself

Share links with expiry

Share files with a link that expires. The decryption key travels in the URL fragment — the part our server never sees. Revoke any link at any time.

Auto-expiry · revocable

Made in Europe

Operated by Initlabs B.V., Netherlands. Stored in European data centres. Dedicated EU infrastructure. EU law applies. No US Cloud Act exposure.

EU (Europe)

Don’t take our word

Read the code.
Build it yourself.

Every client is open source — the web app, the CLI, and everything we’re building next. If we said one thing and shipped another, the code would show it. You don’t have to trust us. You can check.

No lock-in. Export everything as an encrypted archive anytime. The clients are open source, so they keep working even if we don’t.
Audit status, honestly. No third-party audit yet — the code is open to review today, and we’ll publish an independent audit here when it’s done.

github.com/beebeeb-io

beebeeb-core/src/encrypt.rs core@main

use aes_gcm::aead::Aead;
use aes_gcm::{Aes256Gcm, KeyInit, Nonce};
use rand::RngCore;

/// Encrypt an arbitrary plaintext chunk with AES-256-GCM.
/// A fresh random 12-byte nonce is generated for every call.
pub fn encrypt_chunk(key: &FileKey, plaintext: &[u8])
    -> Result<EncryptedBlob, CoreError> {
    let cipher = Aes256Gcm::new_from_slice(key.as_bytes())?;

    let mut nonce_bytes = [0u8; NONCE_LEN];
    rand::rngs::OsRng.fill_bytes(&mut nonce_bytes);

    let ciphertext = cipher
        .encrypt(Nonce::from_slice(&nonce_bytes), plaintext)?;

    Ok(EncryptedBlob {
        cipher_suite: CipherSuite::V1Aes256Gcm,
        nonce: nonce_bytes.to_vec(),
        ciphertext,
    })
}

Install the CLI

One line. Downloads the release and checks its SHA-256 checksum before installing. Works on macOS, Linux, and WSL.

$ curl -fsSL https://get.beebeeb.io | sh

View source

How it works

Three steps. No clever tricks.

01 / 03

Sign up

Pick a password. We generate your master key on your device from a 12-word recovery phrase only you ever see. We never receive either.

Recovery phrase · 12 words

01 gather

02 kiwi

03 actor

04 bronze

05 ••••••

06 •••••

07 ••••••

08 ••••

09 ••••••

10 ••••

11 •••••

12 ••••

Only ever shown to you

02 / 03

Upload

Drag, drop, done. Files are encrypted on your device before bytes leave you. We see opaque blobs; only you see your stuff.

Your file → What we store

tax-2025.pdf 4f9e2a01b7c8a93f.enc

passport-scan.jpg e22b1c0a749d83bf.enc

family-photos/ a09c4f7e2bd1880a.enc

03 / 03

Share a link. The decryption key travels in the URL fragment — the part our server never sees. Revoke any link, any time.

The product

Cloud storage. End-to-end encrypted.

Your files, encrypted on your device, stored on EU infrastructure. Start on the web or the command line. Native apps are coming soon.

Available now

Web app

CLI

macOS

Windows

Coming soon

Linux

iOS

Android

Install the CLI

One line. Downloads the release and checks its SHA-256 checksum before installing. Works on macOS, Linux, and WSL.


curl -fsSL https://get.beebeeb.io | sh

View source

Plans

Simple pricing. No surprises.

Start with a 14-day free trial on Starter, Basic or Pro — a card or iDEAL starts it, and nothing is charged until day 15. Every plan includes EU-based storage, zero-knowledge encryption, and full feature access.

Starter

€1,99 /mo

billed monthly · 14-day free trial

The simplest way to start — private storage for the essentials.

What you get

100 GB storage 1 user

Get Basic

Your files deserve better.

14-day free trial. Start it with a card or iDEAL; no charge until day 15, cancel any time before.

Start a 14-day trial Read the security note

Your files
belong to you.

Access for data.
That’s the deal
most clouds make.

We cannot read
your files.

Privacy that works. Features that don't cut corners.

Read the code.
Build it yourself.

Three steps. No clever tricks.

Sign up

Upload

Share

Authenticate

Push

Share

Cloud storage. End-to-end encrypted.

Simple pricing. No surprises.

Your files deserve better.

Your filesbelong to you.

Access for data.That’s the deal most clouds make.

We cannot readyour files.

Privacy that works. Features that don't cut corners.

Read the code.Build it yourself.

Three steps. No clever tricks.

Sign up

Upload

Share

Authenticate

Push

Share

Cloud storage. End-to-end encrypted.

Simple pricing. No surprises.

Your files deserve better.

Your files
belong to you.

Access for data.
That’s the deal
most clouds make.

We cannot read
your files.

Read the code.
Build it yourself.