Paramant was built because file transfer today means file storage. Every provider keeps a copy "for convenience" — or for machine-learning, or because their compliance officer never read the AES-256-GCM spec.

We inverted the default: the relay sees ciphertext only, stores it in RAM, and destroys it on first read. The math proves we cannot peek — not that we promise we won't.

The cryptography is the NIST post-quantum suite (FIPS 203, 204, 205, 206) — the same algorithms US federal agencies migrate to through 2030. Our managed relay is hosted at Hetzner DE under EU law, outside US CLOUD Act jurisdiction.