Your team's files.
Your server. Your rules.
VaultTeam is a fully self-hosted team collaboration platform. Encrypted passwords, SHA-256 deduplication, role-based access, and a complete audit trail — all on infrastructure you control.
/ capabilities
Everything your team needs, nothing it doesn't.
No external APIs. No third-party storage. No telemetry. The bytes stay on the disks you own.
Local authentication
JWT access tokens (15 min) + refresh tokens (7 days, hashed, rotatable). Passwords bcrypt cost 12.
Multi-team workspaces
Create unlimited teams. Each has its own private page, file vault, and member roster.
Role-based access
Admin, Team Manager, Member. Enforced at API, route, and Postgres row-level-security layers.
SHA-256 deduplication
Every upload is hashed. A duplicate returns: "This file already exists and cannot be uploaded again."
Full audit trail
Who uploaded, edited, deleted, changed roles. Append-only, exportable as CSV for compliance.
Bilingual EN / AR
First-class Arabic support with RTL layout, locale switcher, and per-user language preference.
/ architecture
Three containers. One private network.
frontend
React + Next.js. Responsive desktop / tablet / mobile. Speaks to backend over private docker network.
backend
Node.js + Express. JWT auth, multer streaming, SHA-256 hashing, audit logging. Stateless — scale horizontally.
postgres + vault
PostgreSQL 16 for metadata with RLS isolation. Local ./data/vault directory for files.
/ security
Defense in depth.
Own your collaboration stack.
One docker-compose file. No vendor lock-in. Your data never leaves the building.