Seren Storage

Buckets and files

Organized, owned, and bounded

Files live in buckets that belong to your organization. Each file has a clear owner, and two people can keep files under the same name without overwriting each other. Folder-style listings, move (including renames), and copy operations make buckets feel familiar without sacrificing the reliability of durable object storage. Usage reports and organization-level limits on file size, file count, and total storage keep growth predictable.

Uploads and downloads

Short-lived links, verified results

Uploads and downloads use short-lived secure links, so file contents never pass through Seren's API servers and every link stops working minutes after it is issued. Large files can upload in independently retried parts. A file only becomes available after Seren verifies that every part and the completed file match the declared integrity checksum, expected size, and required encryption. Anything that does not match is rejected and cleaned up automatically.

Deleting a file moves it to recoverable trash first. Members with organization management access can choose how long each bucket retains trash and can optionally expire older files automatically. If the underlying storage is temporarily unavailable when a purge is due, Seren keeps retrying in the background, and the file stays counted against storage usage until it is actually gone.

Files and workspaces

Durable files around active work

Seren Storage is the durable file layer around active work. Sandboxes keep their own scratch workspace for builds, caches, and temporary files, while completed reports, attachments, exports, and other artifacts can be promoted into encrypted organization storage. A cloud employee with writer access can also keep encrypted snapshots of its workspace in a selected bucket. Seren restores the latest snapshot when a replacement runtime starts and retains only the number of snapshots your organization chooses.

Employee access

Grant only the bucket an employee needs

Members with organization management access can attach a specific bucket to a specific cloud employee with reader or writer access. Reader access is limited to listing and downloading files. Writer access adds upload, copy, move, trash, and restore operations. Removing the attachment revokes the employee's bucket access without changing access for other people or employees.

Encryption and isolation

Every organization gets its own key

File contents are encrypted with a key dedicated to your organization, and that key can only be used for your organization's files - it cannot decrypt anyone else's, and no other organization's key can decrypt yours. A key's permissions are fixed when it is created: routine platform services cannot change them afterwards, and any later change requires an account administrator and is monitored.

File records follow the same model as other Seren products: they live in your organization's isolated service storage, not in a shared database. Access is authorized on every request; encryption and isolation add protection but never replace it.