About GCN.ONE
GCN.ONE is a zero-knowledge encrypted service for sending files and messages, operated by ORBCORE LTD - a company registered in England & Wales since 2012.
Files and messages are encrypted on your device. We hold data we cannot read, and delete it when the transfer window closes.
Company and operations
What a procurement or security review asks for first.
These are set out formally in our legal and company information, our Privacy Policy and our Terms and Conditions.
How the service is run
Where your data sits
EU infrastructure. A short list of sub-processors (published here), each bound by an Article 28 agreement. Transfers outside the EU or UK rest on standard contractual clauses and only ever involve ciphertext.
What happens during an incident
Users and authorities are notified within 72 hours. A compromise of our servers exposes ciphertext, not your files or messages.
What is committed in writing
A signable DPA; the sub-processor list with notice of changes; standard contractual clauses and transfer impact assessments; defined retention and deletion; the 72-hour notification; support response times. All in our Terms. There is no separate uptime guarantee, so talk to us before you buy if you need one.
If you decide to leave
You hold the keys. Download and decrypt in the browser or with our SDK. Nothing on our side is needed to read what you were sent.
Why we built it
Cloud storage has consolidated into a few providers: easy to adopt, hard to leave, on terms that can change without you. A fair trade for holiday photos. Not for a client file, a medical record or a deal document.
So GCN.ONE has no 'recover my file', no admin access to content and no master key. Built to GDPR from the start, run in the EU, privately funded and ad-free. What we cannot read, we cannot sell.
Software you can leave is software you can trust.
How it works