Sortify Cloud: Private Collaboration Without Cloud-Provider Setup

A use case for families, collectors, studios, clubs, and small teams that want managed encrypted sync

The Situation

A small group wants one shared record of its equipment, household items, supplies, or tools. Everyone needs to add items, update locations, and see recent changes, but the group does not want every member to connect Google Drive, OneDrive, or Dropbox or manage provider-folder permissions.

Sortify Cloud is the managed collaboration option for this case.

It keeps Sortify's local-first model while replacing provider file sharing with an entitlement-enabled zero-knowledge transport. Members sign in to Sortify, join the workspace through the normal invite and approval flow, and synchronize encrypted changes without connecting a personal storage provider.

A Practical Example

Consider a community photography studio shared by six people.

The studio tracks:

• cameras and lenses;
• tripods and lighting stands;
• batteries and chargers;
• backdrops and clamps;
• memory cards and adapters;
• repair and maintenance notes;
• the room, cabinet, shelf, or checkout area where each item currently belongs.

One member moves a light meter from the equipment cabinet to Studio B. Another adds two charged batteries. A third corrects a serial number.

Each change is written to that member's local Sortify database first. Sortify then converts the relevant local change into a compact event, encrypts it on the device with the workspace key, and sends the encrypted event through the Sortify Cloud transport. Other authorized devices receive the event, decrypt it locally, and update their own local databases.

The working app remains responsive even if the network is unavailable. Offline changes wait in the local queue and synchronize when connectivity returns.

What Members Need

Members need:

• a Sortify account;
• a valid workspace invite or join code;
• approval where the owner requires it;
• access to the workspace encryption material through Sortify's encrypted member and recovery flow;
• a Platinum or other authorized entitlement where Sortify Cloud is gated.

Members do not need:

• the owner's Google Drive account;
• a matching OneDrive or Dropbox account;
• access to a shared provider folder;
• a Google Drive Picker or Finalize Join file authorization step.

The owner still controls membership. Secondary members cannot rename or delete the workspace, invite users, or change owner-only settings unless their role explicitly permits it. Removed members lose future managed-sync access.

Why It Is Still Zero-Knowledge

Sortify Cloud is managed transport, not plaintext inventory hosting.

The managed infrastructure can process safe coordination data such as:

• workspace and member IDs;
• roles and membership status;
• device IDs;
• event sequence numbers;
• checkpoint generations;
• timestamps and sync cursors;
• encrypted event and checkpoint payloads;
• entitlement state;
• encrypted recovery envelopes.

It does not need plaintext item names, room names, notes, quantities, locations, photos, workspace keys, account master keys, or recovery passwords.

Authorized devices hold the keys required to decrypt workspace content. MokingBird cannot use Firebase Authentication alone to read a workspace.

Joining and Recovery

The join flow uses the same product language as other Sortify workspaces:

Invite -> Join request -> Owner approval -> Encrypted first sync

There is no cloud-provider authorization layer because the workspace uses Sortify Cloud rather than a user-owned provider.

For recovery:

1. The user signs in to Sortify.
2. The app restores eligible workspace memberships.
3. The user unlocks the encrypted account or workspace key envelope.
4. The device downloads the latest encrypted checkpoint.
5. The device applies the retained encrypted event tail.
6. The local SQLite workspace is rebuilt.

If the user loses every trusted device and also loses the password or recovery secret needed to unlock the encrypted envelope, MokingBird cannot decrypt the workspace for them.

Why This Fits Small Collaborative Groups

Sortify Cloud removes the operational burden that often makes provider-based collaboration difficult:

• no shared-folder acceptance;
• no provider account mismatch;
• no provider-specific membership state;
• no Google Drive file Picker;
• no whole-file package transfer for every small managed-sync change;
• faster propagation of item moves and edits;
• the same offline-first local database on every device.

User-owned cloud collaboration remains available for groups that prefer to keep encrypted workspace files in their own Google Drive, OneDrive, or Dropbox account. Sortify Cloud is an additional option, not a replacement.

Availability

Sortify Cloud workspace creation is entitlement-gated. Availability depends on the app release, account plan, Firebase deployment, security rules, indexes, and regional or commercial configuration. Authorized development and test accounts can use controlled entitlement overrides without weakening production access rules.

The Result

For the photography studio, Sortify becomes a shared memory of the space without requiring anyone to become the cloud-storage administrator.

Members know what exists, where it is, and who changed it. Their devices do the encryption and decryption. Sortify's managed infrastructure moves encrypted updates between authorized members without becoming a readable inventory database.