Unexposed — Mzed Studio case study
Client-side encrypted document vault with zero-knowledge architecture.
Overview
A zero-knowledge document vault that encrypts files in the browser before upload, so the platform itself can never read them.
The problem
Teams handling HIPAA-sensitive records, legal contracts, and financial documents need encrypted storage where the host itself can't read the files.
What we built
- AES-256-GCM encryption in the browser, so documents are encrypted before they ever reach the server
- Keys stay with the account, never with the platform
- Passwordless sign-in with passkeys and biometrics
- Secure sharing with time-limited links, password protection, and full access audit logs
- Document request workflows that collect files from external parties with no account required
- In-browser PDF and image viewer that decrypts only in memory
Stack
Next.js 16, React 19, TypeScript, Postgres, Better Auth, Tailwind CSS
Industry: Security, SaaS, E2E
Designed, built, and shipped by Mzed Studio.
Visit Unexposed