Private archive
sealScans, photos, and personal files stay unreadable to Havre. The client seals them before storage.
Silo
Your storage space, package, devices, and sync state in one place.
Your Silo account
Loading account state from Havre...
Connecting to the Silo control plane. Package, quota, device, and file metadata stay tenant-scoped.
PackagePreviewNo active package
Used0 B0% of quota
Available0 BReserved: 0 B
Devices0registered devices
Setup verification
Get a device syncing
Reading the safe server-side setup checklist...
Reference client commands
The browser can verify account and device readiness. The local doctor checks the key and folder without uploading or changing files.
Subscription
PreviewNo active package
Trusted client
Sync from your device
Private files are sealed before upload. Use the reference client or its desktop companion to register a device, create or import a recovery bundle, and sync a selected folder. Recovery passwords stay in the canonical client terminal. The foreground watcher keeps that folder current while the companion is running. Each device has its own key; an existing device can approve it for files already stored.
silo-device registersilo-device grant --id <target-device-id>silo-sync ./My-Silosilo-watch ./My-Silo --interval-seconds 30The browser shows state and metadata. It does not hold your only private key or upload private files.
Library intake
Identify before upload or link
Private scans stay on the encrypted upload path. Books already available on the web can be saved as a rights-declared reference instead, so Silo stores no duplicate bytes.
Music referenceLink web-available music without storing the mediaUse a stable external ID when you have one; otherwise Silo keeps a tenant-local metadata candidate.
Capacity
Choose a storage package
Launch gatesChecking checkout readiness...
Secure payment Stripe handles card details. Havre never receives the card number.
Drive view
Current files
Version history
This list contains safe metadata only. Open private files from a registered synced device.
Access
Registered devices
Device registration and key generation happen in the trusted client. On a new device, register its independent key, then approve it from an existing device with silo-device grant --id <target-device-id>. Revoking access cannot erase plaintext already downloaded.
Paid core launch path
The storage space comes first. Books and public references are secondary shelves.
01Buy storage
Choose a fixed capacity package and see the terms before checkout.
02Encrypt on device
Seal private files locally before they leave an authorized device.
03Sync devices
Link your devices, resume transfers, and keep conflicts as separate copies.
04Restore with proof
Verify integrity and restore a prior version before the paid launch.
PackageSeed100 GB preview capacity
Private2 shelvesSeal before upload
Public2 shelvesRights or source required
RegionCA / BHSCanadian path under proof
Choose the collection rule first
The mode controls the future upload and sharing behavior.
Public library
declareBooks and music can remain web-readable only when you own or have the right to publish them.
Book intake preflight
Identify a book before Silo commits its scan to the collection.
01Scan
Read a barcode or ISBN, then use OCR when the book has no reliable code.
02Identify
Resolve the work, edition, language, format, and source metadata.
03Compare
Check the tenant library for an exact content match before bytes are committed.
04Commit
Link an exact duplicate, keep a distinct edition, or hold an uncertain scan for review.
Next safe action
Preview only. This identifies fixture metadata in the browser and never uploads a scan or stores a file.
Your collections
This preview uses local browser state only. No file leaves the browser.
Private scansDocuments · Private archive
18.4 GBSeal before upload
Reference client pilotsync state
Preview Family photosPhotos · Private archive
42.1 GBSeal before upload
Reference client pilotsync state
Preview Open booksBooks · Public library
6.8 GBRights or source required
Reference path plannedsync state
Planned Music libraryMusic · Public library
12.6 GBRights or source required
Reference path plannedsync state
Planned Package shapes
Silo Seedpreview
100 GB
Scans and starter photo archives
Silo Homeplanned
1 TB
Family photos and documents
Silo Libraryplanned
5 TB
Books, music, and mixed collections
Silo Archiveplanned
10 TB
Long-retention copies and backup sets
What is safe today
✓
Safe to review
Collection modes, package shapes, region language, and future sync steps.
!
Wait for pilot
Personal uploads, real package checkout, key recovery, and public file sharing.