File-Native Security · 01 Based in Los Angeles, CA

Self- Protecting Files

NextPotion turns any ordinary file into an encrypted container that carries its own access rules. Drop a file into the desktop app, decide who may open it and when, and share it anywhere — the protection rides inside the file, so your data stays sealed through email, chat, and cloud even when the channel isn't.

Encryption 256-bit AES · Client-side

What makes it different

The Principle

02 / 05 SEC / 2

Security shouldn't live in the network. It should live inside the file.

The model/ 01

Every file becomes its own perimeter

Most security guards the place a file sits or the road it travels — a server, a device, a network, an app. NextPotion guards the file. You drop any ordinary file into the desktop application, set the rules for who may open it, and generate an encrypted container with those controls sealed inside. Because the protection is part of the file, it can't be stripped off, left behind, or outrun when the file moves.

Two independent locks. Both must fall.
The architecture/ 02

Encrypted at the source, held only by you

Encryption happens entirely on your device with 256-bit AES. NextPotion never sees your files and never stores them — they remain solely in your possession. There is no central library of plaintext to raid and therefore no single point of attack. Reaching a protected file would mean independently breaching both your system and ours at the same time, a fundamentally harder problem than defeating either one alone.

Zero knowledge/ 03

We can't read what we never receive

The key is generated and kept on your machine; the plaintext never leaves it. Our role ends at the software. That isn't a promise to look away — it's an architecture in which there is nothing on our side to look at, even if we wanted to or were compelled to.

It's not the channel you trust — it's the file you control.

Travels with the data/ 04

Send it anywhere — it stays sealed

Email it, drop it in a chat, push it to cloud storage — the container carries its rules wherever it lands. The transport no longer has to be trusted, because the file doesn't depend on it. Only the recipients you named can open it; everyone else, and every system in between, sees nothing but ciphertext.

Against autonomous access/ 05

Files are no longer read only by people

Today both people and autonomous software agents move, copy, and read files at machine speed, and perimeter defenses were never built for that. NextPotion lets you decide which files AI systems may index — and even which parts of a file they may touch — so sensitive content is never scanned, stored, or surfaced by tools you didn't authorize. File-native encryption becomes a hard constraint on autonomous data movement, not a policy you hope is honored.

One file. Untrusted channels. Still sealed.
Indexing denied at the file.

Four steps, one file

The Workflow

03 / 05 SEC / 3
[ Inside the app ] Desktop · macOS & Windows

The NextPotion desktop app. Drag, set the rules, generate, and share — every step runs on your machine, and the encryption key never leaves it.

Talk to us
  1. 01

    Drag in a file

    Pull any ordinary file — document, spreadsheet, image, or archive — into the application.

  2. 02

    Set permissions

    Name who can open it, for how long, what each viewer sees, and whether AI may index it.

  3. 03

    Generate

    The app builds an encrypted, trackable, revocable container — entirely on your device.

  4. 04

    Share it

    Send it through any channel you like. Only the recipients you designated can ever open it.

04 / 05SEC / 4

Capabilities

Five controls, sealed into every file

Once a file is protected, its rules belong to you — not to the inbox it lands in or the drive it's copied to. Every control below is embedded in the container itself and stays enforceable after the file has left your hands.

01

Permissions

Who opens it, and when

Access is granted to the named recipients you choose, not to whoever happens to hold a copy. Decide exactly who may open a file and from what moment — and change that decision later without re-sending anything.

02

Redaction

One file, different views

The same document can display differently depending on who is looking. A single file replaces the stack of separate versions you'd otherwise cut, label, track, and reconcile by hand — and there's no risk of the wrong copy reaching the wrong reader.

03

Time controls

Seal it until its moment

Set an expiration date, a future start date, or both. A file can stay completely unopenable until a release time and lock itself again afterward — purpose-built for embargoed announcements and scheduled material that must not surface early.

04

Audit & revocation

Track, revoke, extend

See who opened a file and when. Revoke access at any time — even after the file has been sent — and grant additional access just as easily when the circle of trust needs to grow. Control doesn't end at the send button.

05

AI access control

Decide what machines may read

Control which files AI systems may index — down to which parts of a file are off-limits — keeping sensitive content from being scanned, stored, or surfaced by automated tools. A constraint enforced by encryption, not by a setting you hope is respected.

Made for the way files actually move

SEC / 4.1
  • A.An announcement that must stay sealed until its release time, then open on schedule.
  • B.A contract every party should see differently — drawn from one file, not five drafts.
  • C.A document you can pull back the moment a deal changes or a recipient leaves.
  • D.Records kept out of reach of automated indexing, even inside shared workspaces.
  • E.A sensitive file sent over consumer chat or cloud, sealed regardless of the channel.
  • F.Access widened after the fact — new viewers added without re-sending the original.
05 / 05SEC / 5

Let's seal it

Strong security starts with the file itself.

We reply from hello@nextpotion.com. Your message opens in your mail app — nothing is stored here.

Message ready to send

Your mail app should now be open with everything filled in. If it didn't open, write to us directly at hello@nextpotion.com and we'll take it from there.

Email us directly