Your privacy is the product

We built Pluto so that not even we can read your files. Here's exactly how we keep your data yours.

🔐

Encryption keys are derived on your device and never transmitted. We store only encrypted blobs.

🛡️

Files are encrypted at rest with AES-256 and in transit with modern TLS 1.3.

🔑

Protect your account with TOTP apps, hardware keys, and passkey support.

📋

Independently audited controls for security, availability, and confidentiality.

🇪🇺

Choose your data residency region and exercise full data-portability rights.

🔍

Every access and change is logged, giving teams complete visibility and traceability.

Infrastructure

Defense in depth

Multiple independent layers protect your data at every stage of its lifecycle.

🌐

Data is sharded and replicated across geographically separated nodes with no single point of failure.

⏱️

24/7 intrusion detection and automated anomaly alerts keep threats out around the clock.

🧯

Hourly encrypted backups and a tested recovery plan guarantee a 99.99% uptime SLA.

🎯

We reward researchers who help us stay ahead — responsible disclosure is always welcome.

FAQ

Can Pluto employees read my files?+

No. With zero-knowledge encryption, your files are encrypted before upload and we never hold your keys.

What happens if I lose my password?+

You can restore access with your recovery key. Because of our zero-knowledge design, keep it somewhere safe — it's the only way back in.

Where is my data stored?+

You choose a data region at signup — the EU, US, or Asia-Pacific — and your files stay there.

Read our whitepaper or request our latest SOC 2 report from the team.