Skip to content

Secure Storage

Your files. Your namespace. Encrypted at rest.

Every Lenzeye user gets a dedicated cloud storage space backed by Wasabi S3 — an enterprise-grade, S3-compatible object storage service. Files are stored under your email namespace and optionally encrypted with AES-256-CTR before they ever reach the cloud.

Storage Architecture

flowchart LR
    A[Your files] --> B[Lenzeye Platform]
    B --> C{Encryption\nenabled?}
    C -- Yes --> D[AES-256-CTR\nencrypt]
    C -- No --> E[Direct upload]
    D --> F[Wasabi S3\nAP Southeast]
    E --> F

Files are stored at: {your_email}/{folder_name}/{filename}

This means every user's storage is completely isolated — no file from one user can ever be accessed from another user's namespace.

Key Properties

Property Detail
Backend Wasabi S3 (AP Southeast-1 region)
Default storage 25 GB (Free plan)
Encryption AES-256-CTR at rest (per-user key)
Namespace isolation Files stored under {email}/ prefix — fully isolated
Access Via Lenzeye web dashboard or download links
Download Streamed via presigned URLs — no intermediate copy on server
Connection pool 50 concurrent S3 connections for fast parallel downloads

Uploading Files

Files can reach your Lenzeye storage in two ways:

  1. You upload directly — from your dashboard
  2. Someone sends to you — via Lenzeye File Transfer (guest upload) — files land directly in your storage

Both paths support multipart upload (10 MB chunks), resumable on failure.

Downloading Files

Downloads are served via Wasabi presigned URLs:

  • The Lenzeye server generates a time-limited, cryptographically signed URL for each file
  • The browser downloads directly from Wasabi — the file data does not pass through the Lenzeye server
  • For encrypted files, the server streams, decrypts, and delivers the plaintext — HMAC is verified before the first byte is sent

Storage Management

  • Storage used is calculated directly from Wasabi S3 — summing the actual bytes stored under your prefix
  • This is updated before every guest upload check to ensure accurate limits are enforced
  • Storage limit is set per user (default 25 GB, upgradable via subscription)
  • If storage is full, uploads are blocked with a clear error message before transfer begins

Folder Organization

Files inside your storage are organized by folder name. When using Lenzeye File Transfer:

  • The sender specifies a folder name (e.g., Wedding_2026)
  • If that folder already exists, Lenzeye auto-appends a version (Wedding_2026_v1, Wedding_2026_v2)
  • This prevents accidental overwrites without any manual intervention

Wasabi S3 — Why Not AWS?

Wasabi AWS S3
Egress fees None Charged per GB
Cost per GB ~80% cheaper Higher
S3 compatibility 100% (same API) —
Performance Comparable Comparable
Region AP Southeast-1 Multiple

Wasabi's zero-egress pricing means Lenzeye users are never charged extra for downloading their own files — unlike AWS where every download costs money.