Permission-aware encrypted cloud sync for teams. Client-side encryption with KMS-backed server-managed keys, per-file permissions, and full audit logging through AWS. Desktop + mobile.