Version 1.0 — July 2026. The heavy line is the file: it never touches SecureSend.
Orange: one-time key escrow (a few hundred bytes of metadata, one key, released once). Green dashes: the encrypted file itself — it travels sender-to-recipient by email attachment, drive link, USB stick, anything — and never passes through SecureSend. Grey: supporting metadata flows to subprocessors listed at /legal/subprocessors.