Built by people who care about privacy

VexaHub is a small, focused team building cloud storage that actually respects your data. No US or Chinese hyperscalers, no surveillance business model.

How it started

2023

Started in 2023 as a passion project. Originally designed as a media platform, it gradually evolved into something more focused. A privacy-first cloud storage, built the right way from scratch.

2024

One year of architecture work. The encryption stack was designed from scratch. Nothing off-the-shelf.

2026

VexaHub is launching. Fully EU-sovereign infrastructure, zero US infrastructures, and post-quantum encryption from day one. Not a promise. It's already built.

What we stand for

Privacy is not a feature. It is the foundation.

Zero-knowledge, for real

We technically cannot read your files. The key never leaves your device. This is not a marketing claim. It is a technical constraint we designed on purpose.

Honest by default

No dark patterns, no upsell traps, no data harvesting. What you see is what you get. If something is not ready, we say so.

European sovereignty

Every server, every infrastructure, every certificate authority is EU-based. We are not subject to the CLOUD Act or any US jurisdiction.

Built to last

Post-quantum key exchange for file sharing, quantum-safe symmetric encryption for files at rest. We are not retrofitting security. We are designing for the threat model of the next decade.

How it is built

Every technology choice is made for a reason. Performance, sovereignty, or security. Nothing is here by default.

Frontend

  • SvelteKit

    Static adapter, adapter-static. Zero server-side rendering leaks.

  • libsodium

    Core encryption primitives. XChaCha20, X25519.

  • ML-KEM-768

    Post-quantum key encapsulation

Backend

  • REST API Server

    API server and resumable uploads.

  • Relational Database

    Primary database. Stores only encrypted metadata.

  • Distributed Cache

    Distributed locking for concurrent uploads.

Infrastructure

  • Hetzner

    Servers. Germany, EU jurisdiction only.

  • Storage

    German data-centers. EU-sovereign, no AWS.

  • Bunny

    EU-based provider