Private cloud storage & on-device AI

Your files.
Your cloud.
Your AI.

Private storage meets on-device intelligence.

CipherQ gives you an authenticated, encrypted file vault and an on-device AI assistant. Keep your documents secure on hardware you own, discover information with keyword and semantic search, and get verifiable answers with page-level citations—with all processing kept strictly local.

Explore features Compare plans

Designed for resource-conscious computing on Arduino UNO Q and Debian Linux.

cipherq / private workspace
Workspace overview

Private workspace preview

Local services ready
StoragePrivate vaultEncrypted at rest
SearchFast searchKeyword & semantic
Local assistantAsk questions about your filesGrounded answers with page citations
Core Capabilities

Built for privacy and local intelligence.

Store, retrieve, and understand your documents on hardware you control.

01

Encrypted file vault

Authenticated file storage with verified integrity.

Files are protected at rest with unique individual keys under server master protection. Every upload records cryptographic checksums to verify integrity on download, with full support for uploading, downloading, and deleting files.

02

Local AI assistant

Ask questions across your documents with on-device processing.

The on-device assistant runs via an internal service using compact local language models. Document queries and text excerpts are processed locally on your server host for direct, confidential assistance.

03

Keyword & semantic search

Fast keyword indexing across all plans, with semantic vectors on AI Pro.

Locate exact terms with instant full-text search across all plans, or upgrade to AI Pro for local semantic vector search to find passages by concept and meaning on your own device.

04

Resource-conscious computing

Optimized for Arduino UNO Q and Debian Linux systems.

Engineered with streaming memory pipelines, responsive concurrency management, and host disk safety margins to operate reliably on compact edge hardware.

05

Evidence-based citations

Answers grounded directly in your files with source links.

The assistant answers strictly from retrieved passages in your vault, providing clear citations with document names and page references so you can verify every response.

06

Open-source software

Inspect every line of code, audit the security model, and self-host freely.

CipherQ is released under the permissive MIT license. Anyone can inspect the code, verify the security boundaries, and deploy on their own hardware.

Architecture

How CipherQ works

A transparent on-device pipeline from document upload to evidence-backed answers.

01

Step 1 — Encrypted ingestion

Upload files securely through the authenticated API. Each file is assigned an individual key and encrypted before writing to storage, with integrity checksums recorded automatically.

Authenticated encryption · Per-file keys · Integrity verification
02

Step 2 — Account-isolated indexing

When you choose to index a document, text is extracted into page-aware passages within an isolated database. Fast keyword search is available across all plans, while AI Pro adds local semantic vectors.

Full-text search · Local embeddings · User isolation
03

Step 3 — Grounded local Q&A

Ask questions in plain language. CipherQ retrieves matching excerpts, supplies them to the local model, and returns an answer citing exact filenames and page numbers.

Local model inference · Page citations · Grounded evidence
Audience

Who is CipherQ for?

Designed for individuals and teams seeking data ownership, reliable document retrieval, and verifiable answers.

Academics

Students & Researchers

Organize research literature, course notes, and study papers. Search large document collections and query texts with exact page citations to support your work.

Engineering

Software Developers

Store technical documentation, architecture specs, and development notes in a private vault with fast keyword retrieval and local AI question answering.

Research

Analysts & Writers

Explore deep document archives using semantic search to discover connections across reports and reference materials, supported by direct source citations.

Privacy

Privacy-Conscious Users

Maintain physical custody of important records, financial documents, and personal notes on hardware you own, with modern search and on-device AI.

On-device intelligence

Why local AI?

The advantages of running intelligence on hardware you control, alongside practical deployment considerations.

Advantages of local intelligence

  • Data ownership: Your documents, search queries, and embeddings remain entirely on your personal server hardware.
  • Predictable operation: Enjoy uninterrupted access without per-query service fees, subscription tiers, or external rate limits.
  • Offline readiness: Search, explore, and query your indexed documents whenever you need them, even without internet connectivity.
  • Transparent architecture: Inspect the full open-source pipeline, retrieval logic, and local model integration on your system.

Practical hardware considerations

  • Memory allocation: Compact systems like Arduino UNO Q share unified memory between the operating system, storage database, and model runtime.
  • Purpose-built models: Local inference uses efficient, quantized compact models optimized for agile responses on personal hardware.
  • Device throughput: Response times scale naturally with the host processor and hardware capabilities of your chosen device.
  • Hardware stewardship: Physical server uptime, network configuration, and backup schedules remain directly under your management.
Transparent Pricing

Start free. Upgrade your way.

Choose the storage quota and AI capabilities that suit your workflow. Every plan includes the same core cryptographic protections.

Free
₹0

Perfect for individuals getting started with private file storage and fast search.

  • 1 GB storage quota
  • Encrypted file vault
  • Upload, download, and deletion
  • Keyword search
Premium
₹100 / month

Ideal for users who need expanded storage capacity for regular document access.

  • 5 GB storage quota
  • Encrypted file vault
  • Keyword search
  • Resource-conscious concurrency management
Coming soon
Pay as you go

Upcoming plan offering flexible storage quotas for intensive document workflows.

  • Unlimited storage
  • Encrypted file vault
  • Keyword and semantic search
  • Local AI document question answering
  • Applicable concurrency limits

Note: CipherQ's pricing plans are presented for demonstration purposes. Online payments and self-service subscriptions are planned for a future release. During the hackathon preview, plan access is managed administratively.

Capability Free Premium AI Pro Pay as you go
Storage quota 1 GB 5 GB 5 GB Unlimited
Encrypted vault Included Included Included Included
Upload, download & deletion Included Included Included Included
Keyword search Included Included Included Included
Semantic search Not included Not included Included Included
Local AI document Q&A Not included Not included Included Included
Daily AI query allowance — — 100 queries / day Subject to limits
Monthly price ₹0 ₹100/month ₹150/month Coming soon
Technical disclosure

Security & privacy disclosures

CipherQ is engineered with transparent cryptographic boundaries and verifiable local processing. We do not make misleading marketing claims.

Architectural disclosure

Server-managed vault (Not E2EE / Not Zero-Knowledge)

CipherQ is not end-to-end encrypted or zero-knowledge. The server holds the master key and decrypts authorized files into server memory during downloads and text extraction. Anyone with host system administrator access can inspect key material.

Cryptographic method

Authenticated encryption & key wrapping

Files are encrypted with unique per-file Data Encryption Keys using streaming authenticated encryption (AEAD), wrapped under a protected server master key. Full cryptographic specifications are detailed in our technical security disclosures.

Access & authentication

Password hashing & account isolation

User passwords are protected with modern memory-hard hashing. User sessions use cryptographically secure random tokens, and all document and search operations enforce strict tenant isolation.

Processing location

Local search, embeddings & AI

Search indexing, text embeddings, and language model inference run on the local server host. External telemetry is disabled; document contents and queries are never sent to third-party cloud services.

Network & metadata

Metadata & transport security

The database stores basic file metadata (names, sizes, timestamps). When hosting CipherQ outside localhost, operators must configure HTTPS or a secure VPN to protect session cookies and file transfers over the network.

Threat model

Threat assumptions & boundaries

CipherQ protects your data against remote cloud interception, multi-tenant leakage, and third-party AI training. It does not defend against an attacker with root OS access or physical hardware extraction.

FAQ

Frequently asked questions

Clear answers about CipherQ's architecture and capabilities.

What is CipherQ?
CipherQ is an open-source private cloud storage vault and local AI workspace designed for compact hardware such as Arduino UNO Q and Debian Linux. It allows users to store encrypted files, search document contents, and query their files using on-device language models.
Where are my files stored?
Files are stored directly on your server host in an encrypted vault directory. CipherQ does not upload your files or metadata to third-party cloud storage providers.
How does file encryption work?
Each file is encrypted with an individual Data Encryption Key (DEK) using authenticated streaming encryption. The DEK is wrapped under the server's master key and stored in the database. During download or indexing, the server unwraps the key and decrypts the stream in memory.
Is CipherQ end-to-end encrypted?
No. CipherQ uses a server-managed vault rather than end-to-end encryption (E2EE) or zero-knowledge encryption. The server holds the master key and decrypts document text into memory during file downloads and document indexing for AI processing.
Does the AI assistant send documents to an external service?
No. AI inference, text embeddings, and keyword indexing execute entirely on the local server host. Outbound model requests are restricted strictly to loopback addresses, and third-party telemetry is disabled.
What is the difference between keyword and semantic search?
Keyword search looks for exact terms and phrases with relevance ranking. Semantic search converts text into local mathematical vector embeddings to match concepts, ideas, and synonyms even when different terminology is used.
Which file formats are supported?
For secure vault storage, all file types are supported without restriction. For local AI document indexing and text search, CipherQ currently supports PDF, Plain Text (.txt), Markdown (.md), CSV, and JSON files.
What are the storage and AI query limits?
The Free plan includes 1 GB storage and keyword search. The Premium plan includes 5 GB storage and keyword search. The AI Pro plan includes 5 GB storage, semantic search, and up to 100 on-device AI queries per day.
How do I install and configure CipherQ?
Clone the GitHub repository, install dependencies using uv, generate your server master key using the key manager CLI, and start the service with Uvicorn. Detailed instructions are available in our documentation.
Which features are available now?
Available features include authenticated streaming file encryption, integrity verification on download, keyword search, local semantic vector search, on-device AI document question answering with page citations, and administrative tier management.
Is CipherQ open source?
Yes. CipherQ is open-source software under the MIT license. You can inspect the source code, contribute improvements, or self-host your own instance from our GitHub repository.
How do the paid plans work?
Automated billing and self-service payment gateway workflows are currently in active development. Plan tiering is enforced by backend services and can be configured administratively for preview deployments.
Get Started

Take control of your documents and local AI.

Start with an encrypted vault on your own hardware, and add local AI document search and question answering when you need it.

Compare plans