No cloud

File sharing without the cloud

Some files should not leave the building. Client contracts, patient records, unreleased work, anything covered by an NDA that names third-party storage explicitly. The usual answer is a shared folder that keeps breaking, or a cloud account that puts the file exactly where you were told not to put it.

Try Oxolan free for 14 daysWindows 10/11 · macOS 12+ · no card

Why the usual answers don't hold

Cloud sync moves the file off your premises by design

That is the product working correctly, not a misconfiguration. If a client contract forbids their material sitting on third-party infrastructure, no sync setting fixes that — the file has already been uploaded.

"Private" folders in a cloud account are still in the cloud

Access controls limit who can open a file. They do not change where the bytes live, who could be compelled to produce them, or which jurisdiction they sit in.

The offline alternative is a drawer full of USB sticks

Genuinely air-gapped, and genuinely unmanageable. No record of which copy is current and no way to stop the one that walked out of the building.

How Oxolan handles it

Files are transferred, never uploaded

A transfer goes directly from one machine to the other across your own network. We do not receive, store, log, index, back up or process the contents of any file you send — and we have no technical ability to see them.

Encrypted on the wire

Transfers are encrypted, certificate-pinned and BLAKE3-verified, so a file that arrives is the file that was sent.

Nothing to sign into

There are no usernames or passwords between machines, so there is no shared credential to leak and no account that can be compromised into access to your files.

Honest about what does leave

Your licence activates against our server, so we do see an email address, a device identifier and activation events. That is in the privacy policy, in plain language. Your files are a different matter entirely — those never reach us.

Your options, honestly

Including the free ones. If one of them fits you better, use it.

Option	Honest read
OneDrive / Dropbox / Google Drive	The file leaves your premises. That is the design, and for many teams it is fine — but not when a contract says otherwise.
Self-hosted cloud (Nextcloud etc.)	Keeps data yours, and is a real server to run, patch, back up and secure. Good if you have someone to run it.
USB drives	Nothing is uploaded. Nothing is tracked either, and the drive is the easiest thing in the building to lose.
LocalSend (free, open source)	Also keeps files on the LAN, free, and covers Linux and mobile. Send-to-device only, no file locking, and support is the community.
Oxolan	Paid, Windows and macOS. Files stay on your network, encrypted and certificate-pinned, with persistent discovery, file locking and commercial support.

Getting started, in 3 steps

1
Install Oxolan on the machines that handle the sensitive work.
2
They discover each other on your network — nothing is registered with us.
3
Move files between them directly. Nothing is uploaded at any point.

One flat price for the whole office

From $149/yr for up to 5 machines — every plan is the full app. See pricing. Free 14-day trial, no card required.

Download Oxolan — free trial

Frequently asked questions

Do my files ever touch your servers?

No. Transfers are peer-to-peer across your own local network. We do not receive, store, log, index, back up or process file contents, and we cannot see them.

Then what do you collect?

Your email address, a per-device hardware identifier, plan and activation events, payment metadata for invoicing, and support emails you send us. All of it is listed with its purpose in our privacy policy.

Does it work without an internet connection?

Transfers themselves need only your local network. The licence revalidates periodically and the app keeps working offline for up to seven days after the last successful check.

Is it encrypted?

Yes — transfers are encrypted, certificate-pinned and BLAKE3-verified, so content cannot be read in transit and corruption is detected.

Is this enough for GDPR or DPDP compliance?

Keeping files on your own network removes a third-party processor from the path, which usually makes compliance simpler. It is not a compliance certification, and we will not pretend otherwise — check your own obligations.