Trust and security

Transparency about the operator, EU infrastructure, encryption and file lifecycle.

Service status

Operational

Last check: 03/09/2026 15:00 (Europe/Rome)

Checks in the last 30 days: 100% passed (127/127 samples)

  • Upload Operational
  • Download Operational
  • Notification email Operational
  • Malware scanning Operational

Status is updated by automatic checks on upload, download, email and malware scanning.

Environmental commitment

1 tree for every 100 verified sign-ups

We do not claim carbon neutrality and we do not “zero out” CO₂: data centres use energy. We choose digital transfer (a link, files that expire and are deleted, EU hosting) instead of couriers, hard drives and extra copies.

We commit to planting 1 tree for every 100 email-verified accounts, through a reforestation project. The counter is public and we update it each quarter: the first batch is due at 100 verified sign-ups.

We are starting here: the counter shows real verified users; planted trees rise when we reach each batch of 100.

  • 19 Verified sign-ups
  • 0 Trees due
  • 0 Trees already planted

19 of 100 toward the next tree

Operator and support

mandalo.it is operated by Franco Ramonda, sole proprietor of FR Italy (Via Bruno Caccia 9, 12100 Cuneo, VAT 02976040044). Support: info@mandalo.it. Typical response within 1 business day.

Infrastructure

Application servers and file storage are hosted on OVHcloud in the European Union (Germany). Transfers use HTTPS.

Encryption and protection

In transit: HTTPS/TLS. At rest: data and files encrypted on the server (XChaCha20-Poly1305 on non-public storage). This is not end-to-end encryption in the browser: encryption keys live on mandalo.it infrastructure and protect storage volumes; the service is not zero-knowledge. Links use long tokens; optional password protection. Administrative server access requires security keys and two-factor authentication.

Before a transfer becomes downloadable, every file must pass mandatory anti-malware scanning. If the scanner is unavailable, the send does not complete and the link is not activated (fail-closed policy).

What happens to expired files

After expiry (or revoke/auto-delete) the transfer can no longer be downloaded. Files are removed from storage within a few days, except Pro recovery if enabled.

You can revoke an active transfer from your account: the link stops working immediately.

Backups and fair use

We keep technical backups for continuity; they are not unlimited personal archives. Pro allows unlimited transfers up to 100 GB each, subject to fair-use terms.