← All work

CWC Technologies · Node.js

End-to-end encrypted cloud storage — drive service

A Proton Drive-style product where the server never sees a plaintext byte. Every convenience users expect — folder listing, search, thumbnails — is an assumption the encryption takes away.

Role
Backend owner
Type
CWC Technologies
Status
In production

I own the drive service backend end to end: file and folder APIs, storage lifecycle, metadata modelling. The service moves ciphertext and never decrypts it — every convenience users expect from a normal drive product (folder listing, search, thumbnails) has to be rebuilt on top of that constraint instead of assumed.

  • Own the drive service backend end to end: file and folder APIs, storage lifecycle, metadata modelling.
  • S3-compatible object storage for encrypted bytes; the service moves ciphertext and never decrypts it.
  • A metadata model built on ids and relationships, so listing a folder never requires reading a file.
  • Runs as a containerised Node.js microservice with its own API contract, independently deployable.

Looking to hire for something like this?

Want a walkthrough of this project?

I'll show you how it's built and where I'd take it next.