Scans, photos, and personal files stay unreadable to Havre. The client seals them before storage.
Silo
Your storage space, package, devices, and sync state in one place.
Your Silo account
Loading account state from Havre...
Get a device syncing
Reading the safe server-side setup checklist...
Reference client commands
The browser can verify account and device readiness. The local doctor checks the key and folder without uploading or changing files.
No active package
Sync from your device
Private files are sealed before upload. Use the reference client or a future native app to register a device and sync a selected folder. The foreground watcher keeps that folder current while it is running. Each device has its own key; an existing device can approve it for files already stored.
silo-device registersilo-device grant --id <target-device-id>silo-sync ./My-Silosilo-watch ./My-Silo --interval-seconds 30The browser shows state and metadata. It does not hold your only private key or upload private files.
Identify before upload or link
Private scans stay on the encrypted upload path. Books already available on the web can be saved as a rights-declared reference instead, so Silo stores no duplicate bytes.
Choose a storage package
Current files
This list contains safe metadata only. Open private files from a registered synced device.
Registered devices
Device registration and key generation happen in the trusted client. On a new device, register its independent key, then approve it from an existing device with silo-device grant --id <target-device-id>. Revoking access cannot erase plaintext already downloaded.
Paid core launch path
The storage space comes first. Books and public references are secondary shelves.
Choose a fixed capacity package and see the terms before checkout.
Seal private files locally before they leave an authorized device.
Link your devices, resume transfers, and keep conflicts as separate copies.
Verify integrity and restore a prior version before the paid launch.
Choose the collection rule first
The mode controls the future upload and sharing behavior.
Books and music can remain web-readable only when you own or have the right to publish them.
Book intake preflight
Identify a book before Silo commits its scan to the collection.
Read a barcode or ISBN, then use OCR when the book has no reliable code.
Resolve the work, edition, language, format, and source metadata.
Check the tenant library for an exact content match before bytes are committed.
Link an exact duplicate, keep a distinct edition, or hold an uncertain scan for review.
Preview only. This identifies fixture metadata in the browser and never uploads a scan or stores a file.
Your collections
This preview uses local browser state only. No file leaves the browser.
Scans and starter photo archives
Family photos and documents
Books, music, and mixed collections
Long-retention copies and backup sets
What is safe today
Collection modes, package shapes, region language, and future sync steps.
Personal uploads, real package checkout, key recovery, and public file sharing.