vitalsend
One-time delivery for sensitive files. Send once. Then it’s gone.
VitalSend is for high-risk cases where a file must not spread or linger.
EU-based infrastructure. EU data protection by design.
The problem
When sharing is the wrong model
You share a file using a file-sharing service. The link leaks. It gets forwarded. It ends up in a forum or the wrong inbox.
Suddenly, hundreds — maybe thousands — can access the file. You cannot stop it. You cannot undo it. You have to live with the consequence.
These files may represent your most valuable assets:
a manuscript you spent a year writing,
raw footage filmed on set,
or a high-resolution scan of artwork intended for limited release.
If you cannot live with that consequence, you should not share files.
The difference
VitalSend is not sharing. It is a one-time send.
- Files are encrypted on your device before upload
- Exactly one download is allowed
- After that, the file is destroyed automatically
- After delivery, leaked links are useless
- No archive, no history, no leftovers
- Optional service-mediated delivery: VitalSend can hand over access to the recipient on your behalf, without revealing the sender.
Optional extra protection
When even the first recipient must be verified
For highly sensitive situations, you can lock the file with an extra password.
- Link and password are delivered via separate channels
- Before download, a leaked link cannot be used without the password
- Wrong passwords are rejected; too many attempts destroy the file
Adds €3 for recipient verification for cases where mistakes are unacceptable.
Anti-features
What VitalSend does not allow
- Multiple downloads
- Links that keep working if forwarded
- Undo, resend, or recovery
- Collaboration, folders, or storage
- “Just this once” exceptions
If you need any of the above, VitalSend is the wrong tool. Other services are better — for different problems.
When not to use us
Do not use VitalSend if…
- the file is not sensitive if exposed
- you need collaboration or history
- a mistake would be acceptable
- the file can safely remain available or be re-downloaded later
VitalSend is built for high-risk situations.
Traces & data
Data minimization by design
VitalSend is built to retain as little information as technically possible.
Optional choices that create traces (such as email receipts or payment) are clearly marked as such.
- We cannot read your files
- Files do not persist after a VitalSend
- No recipient history exists after completion
We retain only what is needed to run the transfer (and prevent abuse) and delete it when the transfer completes or times out.
All infrastructure and operations are based in the EU. Designed for EU data protection expectations from day one.
The client-side encryption code is public so this can be independently verified.
Pricing
Pricing
One-time irreversible transfer
€7
per VitalSend
+ €3 if you enable recipient verification.
Large files may add execution cost. Very large transfers are supported.
No subscriptions.
No free tier.
FAQ
Short and strict
After one download, the file is destroyed and the link becomes useless. If recipient verification is enabled, the correct one-time code is required before download; repeated wrong attempts destroy the file.
No. One VitalSend, one download. Use a sharing service for multi-recipient distribution.
Repeated wrong code attempts destroy the file. After the single successful download, forwarded links cannot be used again.
Not necessarily. VitalSend can deliver access to the recipient on your behalf, without revealing the sender.
Sender identification is optional. Features that create traces (such as receipts or payment details) are clearly marked.
No. Files are destroyed after delivery or retention timeout. No history persists.
Yes. VitalSend currently supports transfers up to 200 GB. Support for transfers up to 1 TB is in active development.
Large transfers support resumable upload and download. If a transfer is interrupted, it can be resumed without starting over.
You can start an upload in one location and resume it later from another network, on the same device.
VitalSend provides sufficient backend capacity for large transfers. In practice, transfer speed is determined by the sending and receiving environments.
For very large files, the limiting factors are typically the sender’s CPU and memory (due to client-side encryption), as well as available network bandwidth. The same applies on the receiving side during decryption, though decryption is usually less resource-intensive.
VitalSend is designed for correctness and finality rather than raw throughput.
Offering free accounts would require persistent identifiers to prevent abuse. VitalSend is designed so we do not need to know who you are.
That means:
- no account history
- no sender identity to leak
- no metadata graph to analyze or subpoena
- no way to correlate sends over time
This is a deliberate trade-off: fewer conveniences in exchange for stronger minimization.
Subscriptions require long-lived identifiers and usage tracking. For the same reason, we do not offer them.
If you need predictable pricing, we offer value cards:
- prepaid
- anonymous
- transferable
They provide cost control without creating an identity trail.
Decision gate
Can you live with the file spreading?
If yes — use a sharing service. If no — use VitalSend.
VitalSend a fileLatest news
All news →No news yet.