Private archive
sealScans, photos, and personal files stay unreadable to Havre. The client seals them before storage.
Silo
Your storage space, package, devices, and sync state in one place.
Your Silo account
Loading account state from Havre...
Connecting to the Silo control plane. Package, quota, device, and file metadata stay tenant-scoped.
PackagePreviewNo active package
Used0 B0% of quota
Available0 BReserved: 0 B
Devices0registered devices
Space accounting
Keep more with tenant-local deduplication
Unique physical0 Bcounts toward quota
Logical history0 Bretained file versions
Saved by dedup0 Bsame tenant only
Retained items0 versions0 items in Trash
Silo counts each encrypted object once when identical content is linked again in the same tenant. Different encryption recipients, editions, or tenants stay separate.
Setup verification
Get a device syncing
Reading the safe server-side setup checklist...
Reference client commands
The browser can verify account and device readiness. The local doctor checks the key and folder without uploading or changing files.
Subscription
PreviewNo active package
Trusted client
Sync from your device
Private files are sealed before upload. Use the reference client or its desktop companion to register a device, create or import a recovery bundle, and sync a selected folder. Each device can retain only chosen remote prefixes to save local space. Recovery passwords stay in the canonical client terminal. The watcher keeps that folder current while the companion is running, or as a user-level background task after installation. Each device has its own key; an existing device can approve all existing files or only one collection.
silo-device setup --code <one-time-code> --root ./My-Silosilo-device enroll --code <one-time-code>silo-device registersilo-device grant --id <target-device-id> --collection <collection-id>silo-collectionssilo-sync ./My-Silo --collection <collection-id>silo-move-dir ./My-Silo OldFolder NewFoldersilo-service install ./My-Silo --interval-seconds 30The browser shows state and metadata. It does not hold your only private key or upload private files. A collection-scoped grant authorizes existing files in that collection; future uploads include all active devices.
Library intake
Identify before upload or link
Private scans stay on the encrypted upload path. Books already available on the web can be saved as a rights-declared reference instead, so Silo stores no duplicate bytes.
Trusted client next step
When your pilot is enabled, run this on the computer that holds the scan. The client identifies common EPUB/PDF evidence, hashes, and encrypts it locally before preflight.
Music referenceLink web-available music without storing the mediaUse a stable external ID when you have one; otherwise Silo keeps a tenant-local metadata candidate.
Capacity
Choose a storage package
Launch gatesChecking checkout readiness...
Secure payment Stripe handles card details. Havre never receives the card number.
Capacity upgrades use the server price for the larger package and begin a new monthly term. Silo does not promise proration or automatic downgrades in this release.
Drive view
Current files
Version history
This list contains safe metadata only. Open private files from a registered synced device. Folder Move preserves file identity and does not upload bytes again.
Access
Registered devices
One-time device link
Copy this code to the new trusted client. It expires soon and can be used once.
The browser issues only a short-lived enrollment code. The new trusted client generates its independent key locally, redeems the code, and keeps the private key on that device. Use the collection command beside an active device to copy the safe trusted-client handoff; the browser never performs the grant or receives a private key. Revoking access cannot erase plaintext already downloaded.
Sync confidence
Recent transfer receipts
Each trusted client can save a small, tenant-scoped result after a sync cycle. Silo shows status, cursor, and transfer counters here without collecting filenames, hashes, keys, or tokens.
Paid core launch path
The storage space comes first. Books and public references are secondary shelves.
01Buy storage
Choose a fixed capacity package and see the terms before checkout.
02Encrypt on device
Seal private files locally before they leave an authorized device.
03Sync devices
Link your devices, resume transfers, and keep conflicts as separate copies.
04Restore with proof
Verify integrity and restore a prior version before the paid launch.
PackageSeed100 GB preview capacity
Private2 shelvesSeal before upload
Public2 shelvesRights or source required
RegionCA / BHSCanadian path under proof
Choose the collection rule first
The mode controls the future upload and sharing behavior.
Public library
declareBooks and music can remain web-readable only when you own or have the right to publish them.
Book intake preflight
Identify a book before Silo commits its scan to the collection.
01Scan
Read a barcode or ISBN, then use OCR when the book has no reliable code.
02Identify
Resolve the work, edition, language, format, and source metadata.
03Compare
Check the tenant library for an exact content match before bytes are committed.
04Commit
Link an exact duplicate, keep a distinct edition, or hold an uncertain scan for review.
Next safe action
Preview only. This identifies fixture metadata in the browser and never uploads a scan or stores a file.
Your collections
Server-backed collection roots stay in your tenant. Rename or archive a shelf without moving its files; trusted clients seal private files before upload.
Loading collection metadata...
Package shapes
Silo Seedpreview
100 GB
Scans and starter photo archives
Silo Homeplanned
1 TB
Family photos and documents
Silo Libraryplanned
5 TB
Books, music, and mixed collections
Silo Archiveplanned
10 TB
Long-retention copies and backup sets
What is safe today
✓
Safe to review
Collection modes, package shapes, region language, and future sync steps.
!
Wait for pilot
Personal uploads, real package checkout, key recovery, and public file sharing.