Who can read your data, and how to change the answer.

Explainers and engineering notes on data sovereignty, client-side encryption, and building storage no one else can read.

Explainers

Encrypted at rest does not mean private.

Default cloud encryption protects disks with keys your provider holds. Why that is not privacy, and what actually is.

5 Aug 2026