Plain answers about how Raziel encrypts, caches, and bills. No account is required to read this page.
Two modes. Local mode (the default) encrypts your file entirely in your browser using ML-KEM-768 with AES-256-GCM. The plaintext — and your key — never leaves your machine. Server path: if you choose to process on our infrastructure, files travel over TLS and are handled in memory during processing, but they are never written to disk as plaintext and are discarded immediately afterward.
Your files become permanently unreadable. There is no recovery, no password reset, and no copy of your key held anywhere by us. This is the design: only you hold the key. Store it somewhere you control.
The .raziel format is built for plausible deniability. Real filenames are not stored inside the envelope — locally or on our servers (the vault database knows only a content hash). When you decrypt, you choose the filename yourself; the envelope never recorded it.
No. The vault is a short-lived, pre-download cache. Encrypted envelopes auto-delete after 6 hours (free), 12 hours (pay-as-you-go), 24 hours (Guardian) or 48 hours (enterprise), with per-account space limits. You always receive the envelope at encryption time — the cache is only a convenience copy. Download your files and keep them.
Post-quantum cryptography uses math problems that even a large future quantum computer cannot solve quickly. ML-KEM-768 is the key-encapsulation method standardized by NIST as FIPS 203. It lets two parties agree on a shared secret that a quantum attacker cannot recover, so your files stay sealed against both today's and tomorrow's hardware.
Watcher is free: 10 files per month, up to 10 MB each. Messenger is pay-as-you-go at about $0.01 per 10 MB processed. Guardian is $25 per month for higher limits. Sanctum is enterprise — contact us. Payment is accepted in BTC, ETH, or XRP.
Yes. Every client crypto file is hashed into an integrity manifest and signed with our Ed25519 release key, published on /transparency.html with step-by-step verification instructions. You can confirm the code your browser runs has not been silently swapped.
Yes. POST a file to /api/v1/encrypt with your API key and receive back a .raziel envelope. Free API keys are available on request.