New Architecture
UEBB Drive

Your truly private Cloud

In a world where your cloud data is sold and used to train AI, UEBB Drive is the alternative you can verify: 3-layer AES-256-GCM envelope encryption, with a recovery code that stays yours alone.

Every file has its own key. Every user holds a code that recovers their data even if the server vanishes. Zero access, zero compromises.

Powered byUEBB CyberSystem®

Interface

Intuitive Design

UEBB Drive — app mobile con cifratura a busta AES-256-GCM e codice di recupero personale

Mobile App

Dashboard desktop UEBB Drive — cloud privato self-hosted con editor collaborativo integrato

Desktop Dashboard

Features

Collaborate without limits

Sharing

Share files and folders with colleagues and external collaborators securely and with full control.

Versioning

Complete version history. Recover any previous version of your files in one click.

Sync & Backup

Sync with Dropbox Business and Google Workspace for automatic backup and disaster recovery.

Built-in Editor

Edit, don't download.

Open any Word, Excel or PowerPoint document directly in the browser. Real-time collaboration with your colleagues, without ever exposing the file in plaintext.

Word, Excel, PowerPoint

Native support for Office formats (OOXML, ODF and legacy). Open, edit and save with nothing to install.

Real-time co-editing

Multiple people on the same document at once. Changes sync instantly, with an indicator for each collaborator's cursor.

Encryption preserved

The file is decrypted in memory only for the editing session, and re-encrypted with a fresh key on save. The disk never sees plaintext.

Secure editing cycle
01

Decrypt

The file is decrypted into a temporary environment, never written in plaintext to disk.

02

Edit

The editor operates on the document through JWT-authenticated sessions per user.

03

Re-encrypt

On save a new key is generated and the previous version is preserved as a revision.

Flexibility

You choose where

Cloud Hosted

Use UEBB Drive on our servers in the UEBB Datacenter in Italy. Zero configuration, maximum protection, data stays in Italy.

  • Servers in Italy (UEBB Datacenter)
  • Ready to use immediately
  • Automatic backups included

On-Premise

Install UEBB Drive on your servers. Total control, data never leaves your infrastructure.

  • 100% data control
  • Integration with existing infrastructure
  • Full customization

Security

Enterprise Protection

3-Layer Envelope Encryption

A key protects a key that protects a key. AES-256-GCM at every layer, with Argon2id deriving the recovery code key. Each layer rotates independently, without re-encrypting files.

  • Root key kept separate from the data
  • Personal key for each user or company
  • Unique random key for every single file

Absolute Privacy

Files are encrypted before being written to disk. No system, no person, no algorithm can access the contents without the keys — not even UEBB.

  • Zero-knowledge encryption
  • Integrity verified on every read
  • No third-party access

4-Layer Isolation

Company, user, file and recovery code: four independent barriers, designed so a flaw in one does not compromise the others. Database-level segregation is automatic.

  • Separate keys per Company
  • Personal keys per User
  • Unique key per File
  • Recovery code held by the User alone

Full Traceability

Every cryptographic key unwrap leaves a trail. Even a legitimate administrative access is logged, exportable and verifiable.

  • Immutable event log
  • 5-year retention by default
  • CSV/JSON export for compliance

UEBB CyberSystem®

Multi-Layer Protection

The cryptographic system that powers UEBB Drive. Four coordinated security layers, each designed to hold on its own if the others fail.

1

File Encryption

Each file has its own key, generated randomly at upload

2

Storage Encryption

The entire storage substrate protected at hardware level

3

Data Isolation

Separation guaranteed at database level between each client

4

Personal Recovery

The recovery code enables restoration even without the server

Result: Even in case of physical server access, total infrastructure loss or operational incident, data remains recoverable by those entitled to it — and only by them.

New Capability

Your recovery code.

At signup you receive a randomly generated sequence of characters. Only you know it: the server never keeps a readable copy. It is your personal key to your data, working independently of the server.

Your personal code

XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX-XXXX

Shown only once

You see it at generation time. Afterwards, neither you nor we can reconstruct it. You can always generate a new one.

Regeneratable

If you suspect it is compromised or misplaced, generate a new one from Settings. The old one stops working instantly.

Resistant by design

Protected by Argon2id, a memory-hard derivation function designed to make brute-force attacks impractical, even with dedicated hardware.

Vendor independence

If we vanished tomorrow, your data would remain.

From Settings you can download, at any time, an encrypted archive with all your files. An open source tool — with a manual in Italian — performs recovery entirely offline, without needing our server to be reachable or to exist at all.

Verifiable archive

Every file carries an SHA-256 integrity signature. Any tampering is detected immediately.

Readable tool

A few hundred lines of inspectable Python. You can personally verify there are no hidden channels.

No network

Recovery opens no sockets, contacts no server, requires no internet. Runs on an air-gapped computer.

Manual included

Italian user guide with step-by-step instructions, FAQ and technical explanations of what happens internally.

Compliance

GDPR Compliance

UEBB Drive is designed to be fully compliant with the General Data Protection Regulation of the European Union.

Art. 32

Security

Adequate technical and organizational measures to ensure data security, including encryption and integrity verification.

Art. 25

Privacy by Design

Data protection integrated from the design stage. Encryption at-rest and in-transit.

Art. 5

Accountability

Complete audit logging, operation tracking and tools to demonstrate compliance.

Art. 34

Data Breach

Thanks to military-grade encryption, physical loss of media does not expose data.

Our Commitment

Your data is yours alone

Never Sold, Never Used

Your data will never be sold to third parties nor used to train artificial intelligence models. What you upload to UEBB Drive remains exclusively yours.

Datacenter in Italy

Choosing the Cloud Hosted version, your data resides in the UEBB Datacenter in Italy. No extra-EU transfers, full compliance with European privacy regulations.

Access

Simple and Secure

your-company.uebb.cloud
Schermata di accesso UEBB Drive — autenticazione con refresh token rotante e protezione anti brute-force

Ready to protect
your data?

Choose UEBB Drive for your company. Available as a cloud service or installable on your servers for maximum control.