Copies only • encrypted storage gate

Encrypted Upload Center

A production path for users to upload document copies, scans, and phone photos without mixing sensitive legal facts into referral links or public URLs.

1Consent and warningsUsers confirm they are uploading copies only, not originals, and that drafts are not legal advice or safe to sign from preview.

2Encrypted server storageBackend endpoint stores base64 file payloads with AES-256-GCM encryption when UPLOAD_ENCRYPTION_KEY is configured.

3Metadata and accessFile name, mime type, matter ID, user ID, role, upload reason, and vault access rules are captured separately from the encrypted bytes.

4Audit trailEach upload writes an audit event for consent, actor, matter, storage ID, and timestamp.

Production gap to finish outside this ZIP: add managed object storage, malware scanning, OCR/extraction, data retention rules, backups, access log review, and a formal incident response plan.