Locktera provides file-level encryption and cryptographically enforced access control using secure containers. Files are encrypted into immutable containers that enforce access policies independently of storage systems, infrastructure, or application logic.

Unlike traditional security models that rely on storage permissions or network controls, Locktera enforces access cryptographically. Only authorized users, systems, or applications can decrypt container contents, regardless of where the container is stored or transferred.

This ensures sensitive data remains protected throughout its entire lifecycle—including storage, transfer, backup, AI access, and external sharing.

How Locktera Works

Locktera secures files using encrypted containers that serve as the atomic unit of security.

Each container provides:

• Client-side encryption before storage or transfer

• Cryptographically enforced access control

• Immutable container contents

• Persistent access enforcement independent of storage location

• Full audit logging of all access attempts

Access policies are evaluated at the time of decryption, ensuring only authorized identities can access protected data.

Core Workflow

The typical Locktera workflow consists of four steps:

1. Encrypt files into a container

2. Grant access to authorized users or systems

3. Store or transfer the encrypted container

4. Authorized recipients decrypt the container using the Locktera API

Unauthorized access attempts are automatically denied.

What You Can Build with Locktera

Locktera enables secure data workflows across many use cases:

• Secure file upload and storage

• Secure external file sharing with revocable access

• Time-limited access to sensitive files

• Secure backups and database exports

• Secure file transfer between applications

• Secure AI access to sensitive data

• Secure AI training datasets and model weights

• Secure multi-tenant SaaS data isolation

• Secure software, firmware, and OTA update distribution

These workflows are documented in the Guides section.

Key Concepts

Containers

A container is an encrypted, immutable .tera file that holds one or more protected files.

The .tera container is the atomic security unit in Locktera. It encapsulates encrypted content and cryptographically enforced access control into a single portable file.

Containers:

• Encrypt files before storage

• Enforce access policies cryptographically

• Remain secure regardless of storage location

• Persist protection after transfer or copying

• Cannot be modified after creation

Container access policies may be updated without modifying container contents.

Access Control

Access to containers is enforced cryptographically using container access policies.

Access may be:

• Granted to specific recipients or systems

• Revoked instantly

• Time-limited

• Limited by sessions

• Restricted to read only

• Limited by IP address or location

• Fully audited

• Configured as fixed and non-modifiable

• Limited by a password

Access enforcement does not rely on storage permissions or infrastructure security.

Audit Logging

Audit records include:

• Who accessed the container

• When access occurred

• Duration of access

• Page views or content interaction details (where applicable)

• Whether access was authorized or denied

This provides a complete and verifiable access history, enabling compliance reporting, forensic investigation, and secure governance.ernance.

Next Steps

Start with the foundational guide:

→ Secure File Upload and Storage