Self-Hosted CryptPad in Romania for Zero-Knowledge Collab
CryptPad is the one mainstream self-hostable collaborative office suite that is genuinely zero-knowledge: pads, sheets, slides, code, kanban and forms are all encrypted client-side under keys derived from URL fragments, and the server cannot read content even with full database access. It needs about 1 GB RAM and Node 16+. Romania gives a GDPR jurisdiction outside Fourteen Eyes. This page covers Anubiz Host Romania VPS sizing, Docker deployment, registered user quota, and backup of the encrypted blob store.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Why CryptPad Over Cryptpad Cloud
CryptPad.fr is the official hosted instance run by XWiki SAS in France; it works fine but it sits in a Fourteen Eyes adjacent jurisdiction and shares quota with millions of users. Self-host gives you Romania jurisdiction, dedicated quota, and removes the small risk that the operator turns off your account. The cryptographic protection is identical because the server is blind to content either way.
VPS Plan
Anubiz Romania VPS 1 GB for small teams (up to about 15 active editors). 2 GB if you also enable OnlyOffice integration for spreadsheet performance.
Docker Compose
Official cryptpad/cryptpad:latest image. Bind ./data:/cryptpad/data, ./blob:/cryptpad/blob, ./block:/cryptpad/block. Set CPAD_MAIN_DOMAIN and CPAD_SANDBOX_DOMAIN (sandbox must be a different origin for isolation). Caddy with both domains.
Encryption Truth
Genuinely zero-knowledge. Document keys live in URL fragments and are never sent to the server. Even sharing is end to end (link contains the key). The server stores opaque blobs. Caveat: link sharing through any backchannel (email, Slack) leaks the decryption key in transit. Treat the URL as the secret.
Registered Users and Quota
Disable open registration. Generate invite codes from admin panel. Per-user default quota 1 GB; bump for power users. Total disk = sum of quotas + overhead.
Backups
Restic the blob, block and data directories nightly to Anubiz Host Iceland. Encrypted contents stay encrypted in transit. 14/8/12.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.