Zero-Knowledge Architecture

What encryption algorithm does Mantrix use?

AES-256-GCM (Advanced Encryption Standard, 256-bit key, Galois/Counter Mode). This provides both confidentiality and authenticated integrity — any tampering with the ciphertext is detected on decryption.

Where is the encryption key stored?

For zero-knowledge accounts, the key is derived client-side from your passphrase and is not transmitted to Mantrix servers. If you lose your passphrase and no recovery method exists, your data may be permanently inaccessible.

What is EC 16+4 erasure coding?

Reed-Solomon erasure coding splits each encrypted file into 20 shards (16 data + 4 parity). Your file can be reconstructed from any 16 of the 20 shards, subject to account status and service availability.

What happens if Mantrix receives a law enforcement request?

We can provide encrypted shards, account metadata, and readable file metadata such as names and folder structure. For Zero-Knowledge accounts we cannot provide decrypted content because we do not hold the key. For Standard (managed-key) accounts we may be compelled to produce decrypted content. Our policy is published in the Law Enforcement and Transparency pages.

Has Mantrix been audited?

A formal third-party security audit is planned for Phase 2. Our architecture documentation, threat model, and source code are available for review. We publish our legal response policy publicly.

What data does Mantrix store about me?

Account data (email, billing records, storage usage metrics), encrypted file shards, and file metadata such as file and folder names, sizes, types, and your folder structure, which are stored in readable form to operate the service. File contents are stored encrypted; for Zero-Knowledge accounts Mantrix cannot decrypt them, and for Standard accounts Mantrix does not read them for advertising, profiling, or model training. See the Privacy Policy for the complete data inventory.