Encryption Boundary and Keys

Dossira’s optional E2EE behavior applies to file payloads in the supported store-first path. It does not establish an end-to-end encrypted boundary around filenames, folders, all workspace metadata, mirror-style paths, or current external-recipient shares.

Public documentation does not promise customer-managed keys, key export, key rotation controls, escrow, or an administrative break-glass process. Confirm any key-management requirement directly with Dossira before relying on it.