Sovereign File Vault

Google Drive.
On your server.
Under your rules.

Every file in Drive, Dropbox, or iCloud lives on someone else's server -- readable by their employees, accessible to any government that asks, and gone the moment they decide your access is conditional. BeardKeep is your own cloud storage. Same capability. Your infrastructure. Your domain. Your keys. No platform in the middle.

YOUR R2 BUCKET · YOUR DOMAIN · YOUR KEYS GOOGLE CAN'T READ IT · COURTS CAN'T SUBPOENA IT VIEW A FILE WITHOUT HANDING IT OVER SHARE LINKS YOU CAN KILL INSTANTLY AES-256 ENCRYPTED · CLOUDFLARE SEES GARBAGE PDF · DOCX · XLSX · PPTX -- ALL RENDER IN-BROWSER FORWARD FROM TELEGRAM · LAND IN YOUR VAULT SCOUT READS AND TAGS EVERYTHING YOU SAVE NO SUBSCRIPTION · NO PLATFORM · NO EXPIRY SEE WHO VIEWED · WHO DOWNLOADED · WHEN YOUR R2 BUCKET · YOUR DOMAIN · YOUR KEYS GOOGLE CAN'T READ IT · COURTS CAN'T SUBPOENA IT VIEW A FILE WITHOUT HANDING IT OVER SHARE LINKS YOU CAN KILL INSTANTLY AES-256 ENCRYPTED · CLOUDFLARE SEES GARBAGE PDF · DOCX · XLSX · PPTX -- ALL RENDER IN-BROWSER FORWARD FROM TELEGRAM · LAND IN YOUR VAULT SCOUT READS AND TAGS EVERYTHING YOU SAVE NO SUBSCRIPTION · NO PLATFORM · NO EXPIRY SEE WHO VIEWED · WHO DOWNLOADED · WHEN
The problem

You don't own your files.
You rent access to them.

Drive · Dropbox · iCloud right now
Their servers. Your files live in a data center you have no relationship with, under a TOS that can change without notice.
Subpoena-ready. A lawyer sends one letter and Google hands over everything in your Drive -- your documents, your photos, your entire history. You won't even know it happened.
One breach away from exposure. Their data centers get hacked. Their employees have access. Your files are as secure as their weakest link -- and that's not your call to make.
Outage means no access. Their data center goes down and your files are simply unavailable. You have no recourse. You wait.
Share a file and lose control. The recipient has it. They can download it, forward it, save every page. You cannot un-send it.
BeardKeep
Your infrastructure. Your R2 bucket. Your Cloudflare account. Your domain. You own every byte and the entire stack it lives on.
Nothing to subpoena at Google. Your files aren't there. A court order to Google returns nothing. Encrypted files on your own server require a court order directed at you -- which you can contest and prepare for.
AES-256 encrypted at rest. Even if someone got to your R2 bucket, they get opaque bytes. Your key never leaves your server.
Your uptime. Your call. Your VPS is on when you say it's on. No shared outage window. No waiting on a status page you don't control.
Share without giving it away. Recipients view files in-browser. Download is your toggle. Revoke the link and it's gone from their world instantly.
What it does

Everything Drive does.
Plus eight things it never will.

Automatic compression. Phone stays clear.

A job site day is 40 photos. That's 180MB before lunch. BeardKeep compresses every image automatically on the way in -- 60 to 70% smaller, visually identical. PDFs get the same treatment via a dual-pipeline that handles everything from text-heavy reports to photo-deck presentations. Your vault stays lean. Your phone stays clear.

View any file. Download is your call.

Share a file and the recipient gets a clean full-screen viewer -- every page, works on any phone. Whether they can download it is entirely your decision. Toggle download off and they can read every word, scroll every page, and never save a single byte. PDFs, Word docs, Excel sheets, and PowerPoints all render in-browser automatically. iOS's share sheet has nothing to grab -- they see rendered page images, not the file itself. Revoke the link and the document ceases to exist for them entirely.

AES-256 encrypted. Nobody sees what you stored.

Toggle the lock before you upload. The file is encrypted before it leaves your device. What lands in R2 is an opaque blob -- not your file. A breach of R2 gets an attacker nothing. A subpoena to Cloudflare gets them nothing. Your encryption key never leaves your server. Decryption happens in memory, on your Node, at serve time -- only when you or a valid share token requests it. No one else has the key. Not Cloudflare. Not us.

Know exactly who has what and when.

Every share link is tied to a named recipient from your contacts. The moment they open it, you get an alert -- their name, the file, the time, the device. Same when they download. Your Shared Links dashboard shows every active link across every file: who has it, how many times they've viewed it, whether they've downloaded, and a one-tap revoke button. You always know the state of every file you've shared. No guessing. No assuming.

Save from any app. One tap from anywhere.

You're in a text thread and someone sends you a contract. You're in Telegram and a partner drops a file. You're in email and there's an attachment worth keeping. Forward it to BeardKeep and it lands in your vault -- compressed, tagged, organized to a folder. No browser. No login. No navigating anything. Add BeardKeep as a PWA to your home screen and it shows up in your iOS and Android share sheet alongside every other app. One tap from anywhere your files already are.

Screenshots that talk back.

You screenshot a permit. A price quote. An inspector's note. A panel label. Upload it to BeardKeep and Scout reads the text inside the image. That screenshot is now searchable by what it says -- not by what you named it. Six months later, "Weber County permit 2026" surfaces it instantly. No renaming. No folder hunting. The screenshot answers for itself.

Dead links stay alive.

You save a link today. Tomorrow the article gets deleted. The tweet gets removed. The site goes dark. BeardKeep already cached the content when you saved it. Scout fetched the full page, wrote a summary, tagged it by topic. The thing you found still exists -- in your keep. The internet forgets. Your keep doesn't.

One brain across your whole stack.

BeardKeep is part of the BeardPowered suite. What you vault here is visible to Scout, connected to your contacts, and linkable from every other app in the stack. When you say "find that hydrogen microgrid article I saved" -- Scout can actually look. It tagged it when you saved it. It knows what's in it. It finds it. Your vault isn't an island. It's the foundation everything else builds on.

How it works

Drop it in.
Everything else is automatic.

01
Drop anything in from anywhere

Upload from your phone, drag from your desktop, or forward from any app. Add BeardKeep as a PWA and it appears in your share sheet -- one tap from anywhere your files already are.

02
It lands on your server

Images compress automatically. Office docs convert to preview PDFs. Toggle the lock and the file is AES-256 encrypted before upload. Everything goes to your R2 bucket. Nothing touches infrastructure you don't own.

03
Scout reads it in the background

Photos get OCR'd. Links get fetched and summarized. Documents get tagged by topic. You don't do anything -- Scout handles it while you move on. Search by content from day one.

04
Share it on your terms

Generate a link. Choose who can view, whether they can download, and when it expires. Get alerted the moment they open it. Revoke it any time. Every share is yours to control, start to finish.

Your files belong on a server
you own and control.

Google Drive works until a lawyer sends a letter. Dropbox is fine until the price goes up or the data center goes down. iCloud is convenient until it isn't. BeardKeep is yours outright -- the infrastructure, the files, the keys, and the rules about who sees what and when.

Open BeardKeep →