Enterprise file transfer

Send it once. Expires on your terms.

XTRANSFER moves large files straight into your own Dropbox storage and hands the recipient a single link — password protected, download capped, and dead the moment you say so.

Start transferring Book a walkthrough
PBKDF2 + JWT Edge-hosted worldwide Your Dropbox, your data
Q3 Financial ReportsActive
transfer.xgi.io/t/8f14e45fceea167a
Expires in 7 days
Downloads 3 of 10
Protection Password required
What you control

Four settings, and the link is yours

Expiry that actually expires

Every transfer carries an expiry — 7 days by default. Past it the link returns 410 Gone and the files leave storage.

A password per transfer

Hashed with PBKDF2 and a unique salt. Send the link and the password down separate channels.

Download caps

Set a ceiling on how many times a transfer can be pulled. The counter is authoritative, not advisory.

Files live in your Dropbox

Binaries go straight to your Dropbox account through the API. XTND never holds a second copy.

Dropbox inbox automation

Drop a file into /XTND_Transfers/inbox/ and a password-protected transfer creates itself.

Edge everything

Cloudflare Workers and D1 mean metadata reads happen close to the recipient, not in one region.

How it works

Four steps, no client software

XTRANSFER is an API and a thin interface over it. Nothing to install, nothing to keep updated.

  1. 01
    Add files

    Drag them in, or drop them into the watched Dropbox inbox and skip the app entirely.

  2. 02
    Set the terms

    Title, password, expiry, download cap. Defaults are sensible; every one is overridable.

  3. 03
    Send the link

    One URL. The recipient needs no account, no client, and no Dropbox of their own.

  4. 04
    Watch it close

    Track downloads against the cap, or delete the transfer and take the files out of storage.

Security

Boring, checkable guarantees

No proprietary crypto and no vague assurances. Here is the whole stack, in the same words the engineers use.

Read the architecture
Password hashingWebCrypto PBKDF2 · SHA-256 · unique salt
Session tokensJWT bearer, signed server-side
IdentifiersRFC 4122 v4 UUIDs
Metadata storeCloudflare D1 — SQLite at the edge
Binary storageDropbox API v2, OAuth2 auto-refresh
IntegrityDropbox content hash per file

Stop sending files you cannot take back

XTND Transfer sets up on your own Dropbox and Cloudflare accounts. Nothing moves through infrastructure you do not own.

Start transferring Talk to XTND