Can end-to-end encrypted data be subpoenaed?
While a service provider like Arcano can be legally required to hand over encrypted data in response to a valid subpoena, the data would remain encrypted and unreadable without the encryption keys. Since we don't have access to these keys (they never leave your browser), we cannot provide the decrypted content even under a legal order.
How much does end-to-end encryption cost?
End-to-end encryption is included in all Arcano plans, including our free tier. There's no additional cost for this security feature, as we believe strong encryption should be standard for all users. More advanced features and higher storage limits are available in our paid subscription plans.
Which files need to be encrypted?
Any sensitive or confidential information should be encrypted, including: personal data protected by privacy laws (like GDPR), financial documents, legal contracts, intellectual property, healthcare information, internal business documents, and any data you wouldn't want unauthorized parties to access. With Arcano, all your files are automatically encrypted, providing peace of mind regardless of content type.
Will encryption delete my files?
No, encryption doesn't delete your files. It only transforms the data into a secure format that can't be read without the proper decryption key. Your original files remain intact on your device, and the encrypted versions are stored on our servers until they expire (after 10 days by default) or until you manually delete them.
Can my data be viewed by Arcano?
No, all data is encrypted in your browser and then uploaded to our servers. Decryption also takes place in your browser.
How long is my encrypted data stored at Arcano?
By default, received and sent data is kept for 10 days. After that, the encrypted data is irrevocably deleted.
What connection or metadata is stored?
We do not implement any explicit tracking of connection or metadata ourselves. However, certain information required by law and data necessary for creating invoices are stored by our server infrastructure provider (currently: Exoscale https://www.exoscale.com).
How do Organizations work and what are their benefits?
You can connect multiple Arcano accounts by inviting them into the same Organisation in the settings tab. This allows you to have one subscription for multiple accounts Please be aware that this feature requires an "Professional" subscription and a seat in your organization for each user you want to invite.
Has Arcano been professionally audited?
Yes! Our audit was conducted by cure53 gmbh (also known for auditing Telegram and Protonmail). The audit recommendations have been fully implemented. If you are interested, we can provide the relevant documents, please contact us.
What additional security measures exist?
Arcano was developed with the highest security as its goal. Arcano is automatically checked daily for all known security vulnerabilities. As soon as an alarm is triggered, the entire Arcano team is informed and countermeasures are initiated. If a security vulnerability threatens the integrity of data security, we reserve the right to temporarily suspend Arcano.
Who is behind Arcano?
Arcano, or Arcano GmbH, is a company 100 percent owned by its shareholders. The legal form of a GmbH (limited liability company) ensures that foreign investors cannot take control of the software unnoticed.
Why was Arcano developed?
Because we believe that secure data transmission to professionals bound by confidentiality in particular, and secret communication between anyone in general, is a fundamental right.
What requests from legal authorities are answered?
Currently, there are no requests from legal authorities.
Do you support 2-factor authentication?
To increase security, we support 2FA. This can be activated in the settings.
Why doesn't Firefox ask where I want to save a file after downloading?
Various Firefox add-ons can affect the functionality of Arcano. Please try resetting your Firefox settings.
Where is my data stored?
We store all data in Switzerland, currently in the Exoscale Cloud. The data is encrypted and we have no access to it, regardless of where it is stored.
My upload field on my page is not displayed
Content blockers can, depending on their configuration, prevent the IFrame, i.e., the Arcano dropzone, from being displayed correctly or at all.
Is Arcano Open Source?
End-to-end encryption is only possible when the relevant code parts are delivered to your browser. This means everybody can always inspect the source code of Arcano. We believe this increases trust and is the only right way to use encryption. However, the code is still copyrighted by Arcano and may not be used without written consent of Arcano gmbh. We plan to open source the relevant parts of our code on github soon.
Do you have a bug bounty program?
We welcome every hacker and tinkerer who informs us about problems. We will respond with a reception mail, not put any charges against you, fix the problem ASAP, and acknowledge your finding.
Are the files scanned for viruses at Arcano?
No, all data is encrypted in your browser and then uploaded to our servers. We have no access to your data and therefore cannot perform virus analysis.
Can I fully trust the received data?
For every transfer you receive, we send the sender a verification email so that the owner of this email address can confirm that they were the sender. Nevertheless, you should exercise the same caution as when receiving files through other channels (such as email). This means verifying the sender, being careful not to activate macros in Office documents, and using a virus scanner on your computer if in doubt.
Is Dropbox end-to-end encrypted?
No, standard Dropbox accounts are not end-to-end encrypted. While Dropbox encrypts data in transit and at rest on their servers, they hold the encryption keys and can technically access your data. This is different from Arcano's approach, where we never have access to your encryption keys or unencrypted data.
Does Google Drive have end-to-end encryption?
No, Google Drive does not provide end-to-end encryption for standard accounts. Google encrypts your data in transit and at rest, but they hold the encryption keys and can access your data when necessary. With Arcano, your files are encrypted before they leave your device, and only the intended recipient can decrypt them.
What's the difference between TLS and end-to-end encryption?
TLS (Transport Layer Security) only encrypts data during transmission between your device and the server, but once the data reaches the server, it could potentially be accessed in unencrypted form. End-to-end encryption encrypts the data on the sender's device and it remains encrypted until it reaches the recipient's device, ensuring that no one in between (including the service provider) can access the unencrypted content.
What's the difference between end-to-end encryption and link encryption?
Link encryption (like TLS) only secures data while it's being transmitted between two points, but the data may be decrypted at various points along the path. End-to-end encryption ensures data remains encrypted from the moment it leaves the sender until it reaches the intended recipient, regardless of how many intermediary servers or networks it passes through.