Meridian

A private vault for Brightwater County.

Encrypted. Branded. Built in-house.

David Chen gets a link that looks bigger than we are. We get the county’s records without ever putting them on email. This is what shipped — and what it protects.

brightwater.mymeridiangroup.com — live

Surface one

A front door the county can trust on sight.

  • An access code, not a password. Meridian generates it and hands it to David directly — never a birthday, never something guessable, never sent beside the link.
  • Personalized to the person. Brightwater County’s name in the title, David’s name in the welcome — the “is this legit?” question answers itself before he types anything.
  • Checked on the server, throttled on the server. Wrong codes get a calm shake and a vague error; repeated attempts get locked out by Google’s infrastructure, not our honor system.

The live login — exactly what David sees.

Surface two

Both sides drop here. No one else gets in.

Drag files in, watch them land, download what the other side left. Below: the real upload card, running live.

Upload files

Select and upload the files of your choice

1 file · 148 MB

Drop, upload, done — the same card David uses.

Your uploads

1 file

From Meridian

1 file

Due diligence

We didn’t just build it. We tried to break it.

Three AI systems and a separate audit went at this vault the way an attacker would — then a human verified every finding against the live product.

8/10 Independent security review. No one found a way in — the gap to a 10 is extra layers we can add, not holes to patch.
  • A faked login gets nothing. Every file is guarded by Google’s own servers — not by anything in the browser that could be tricked.
  • Nothing to break into. No separate server, no database — the system is small on purpose, so the ways portals usually get hacked don’t apply here.
  • Every client walled off. Brightwater County has its own storage and its own domain — nothing shared, nothing to leak.
This vault locked to named people · encrypted · access can be pulled back
Plain email forwardable · unencrypted in transit · gone the moment it’s sent

Same encryption and server-side access control as the paid vaults — with a fraction of their attack surface, and no server to breach.

What firms pay for this.

$600–$3,300/year to rent a branded secure portal like this — ShareFile, SmartVault, and the like.
$20k–$60k to have one built custom by an agency — six to twelve months of work.

See it yourself

It’s live right now.

brightwater.mymeridiangroup.com

Locked and encrypted.