CryptPad Offshore Hosting - Zero-Knowledge Document Suite

CryptPad encrypts all document content client-side in the browser before sending any data to the server. The server stores and synchronizes ciphertext blobs - it has no ability to read documents, spreadsheets, presentations, whiteboards, or kanban boards regardless of operator intent or legal compulsion. This is architecturally different from Google Docs or OnlyOffice, where the server processes plaintext. CryptPad supports real-time collaboration on encrypted documents: multiple authors see each other's changes live, but all network traffic between collaborators passes through the server as ciphertext the server cannot decrypt. For legal teams sharing draft pleadings, journalists collaborating on investigations, or businesses writing sensitive strategy documents, CryptPad is the only collaboration tool with this guarantee.

CryptPad runs on Node.js and stores data on the filesystem (no database required). A small team instance runs on 1 GB RAM and 1 CPU core. For larger organizations, 2-4 GB RAM handles concurrent editing sessions well. Deploy from source or Docker: ```bash git clone https://github.com/cryptpad/cryptpad.git cd cryptpad npm install cp config/config.example.js config/config.js # Edit config.js: set httpUnsafeOrigin, httpSafeOrigin, adminKeys node server.js ``` Use Nginx as a reverse proxy with TLS. The httpSafeOrigin (sandbox domain) is critical for security - it must be a separate subdomain to enforce iframe sandboxing that prevents XSS attacks. AnubizHost VPS plans with root access allow you to configure the Nginx sandbox correctly and issue Let's Encrypt certificates for both domains.

CryptPad's zero-knowledge design means the server operator (AnubizHost and you) genuinely cannot read your documents even if legally compelled. Combined with AnubizHost's offshore jurisdiction in Iceland or Romania, this creates a threat model where a document remains private against: (1) hosting provider snooping, (2) foreign government data requests, (3) legal orders to the hosting provider, and (4) server compromise if the attacker only obtains stored data rather than live browser sessions. This is the strongest confidentiality guarantee available for a collaborative web application. Paying for AnubizHost hosting with cryptocurrency completes the privacy chain from document creation to infrastructure billing.