OwnDriveVault is a full multi-tenant platform β launch separate workspaces for each company, each with its own Google Drive, admin, users, roles, and permissions. Zero third-party storage. 100% data ownership.
Launch a fully isolated workspace for every company β each with its own Google Drive, admin, users, roles, and permissions.
Every organization gets its own dedicated workspace, its own admin account, its own Google Drive connection, and its own users. Nothing leaks between tenants.
Designed for teams who value security, collaboration, and simplicity. Every feature built with purpose.
Host unlimited companies on one platform. Each gets its own isolated workspace, users, folders, documents, and Google Drive connection β zero cross-tenant leakage.
Multi-TenantNew companies can register themselves in one click from the login screen. Company account, admin user, full permissions, and admin rights β all provisioned automatically.
Multi-TenantNew users register with their company admin's email. Accounts are created inactive until the admin activates them β no unauthorized access ever.
Multi-TenantPlatform owner gets a dedicated Organizations view: user counts, doc counts, Drive connection status, and one-click activate/deactivate per company.
Multi-TenantPlatform owner downloads a complete system .sql snapshot. Company admins get a tenant-scoped .sql β users, folders, shares, permissions, Drive connection β all in one click.
BackupRestore any OwnDriveVault-generated .sql backup with a single click. Statement-by-statement execution, safety checks, and OwnDriveVault-signature validation before touching the DB.
BackupSuper Admin (and Company Admin) can reset any user's password from the User Management panel β with confirmation, min-6-char enforcement, and bcrypt hashing.
SecurityMulti-file uploads show a live progress bar with Skip File and Cancel All buttons. Skipped files are automatically cleaned from Drive to prevent orphans.
UXSelect All checkbox on every list. Bulk delete, bulk share, bulk revoke β for files and folders. Confirmation counts, per-item results, and partial-success handling.
CollaborationBulk-select files and download them as a single ZIP β generated entirely in the browser with JSZip. No server storage, no upload limit, no timeouts.
UXGoogle Drive connects with the secure Authorization Code flow β refresh tokens guaranteed. Access tokens auto-refresh; Drive stays connected forever.
SecuritySuper Admin / Company Admin can disconnect Drive any time. Stored tokens are removed, uploads stop, and existing files remain 100% safe on Google Drive.
SecurityEvery new user β created or registered β automatically gets a dedicated Google Drive folder. Missing folders are auto-healed on next login or session check.
OrganizationUsers cannot be created until the company admin has connected Google Drive. Existing users are never blocked β smart check keeps everything running.
SecurityCreate unlimited main folders, subfolders, and sub-subfolders with breadcrumb navigation. Each maps to a real Google Drive folder for native organization.
UXNavigate deep folder hierarchies with clickable breadcrumbs showing the full path: Root βΊ Main Folder βΊ Subfolder βΊ Nested. Jump to any level instantly.
UXClean user management with a 3-dot dropdown per user: change role, activate/deactivate, reset password, delete β all in one compact menu with smart role guards.
AdminLive percentage counter, status messages ("Uploading...", "Saving record..."), smooth animated bar. Multi-file queue shows "File 2/5" as each upload completes.
UXNo format restrictions, no size limits. Upload any file β .exe, .apk, .iso, 100MB+ videos, unknown formats β everything saves to Drive with proper DB tracking.
FlexibilityDeleting a user, folder, or subfolder recursively cascades through all nested content β DB and Google Drive stay perfectly in sync. Zero orphaned files.
AutomationSmart 4-tier protection: Super Admin manages everyone, Master Admin manages Admins + Users, Admin manages Users only. Impossible to escalate accidentally.
SecurityEvery POST validated with a 32-byte session-bound CSRF token. Login rate-limited with 5-attempt lockout and auto-cleanup of expired attempts.
SecurityOne-click Google Sign-In with company-email tenant resolution. Auto account creation only for platform owner; all other new accounts stay inactive until approved.
SecurityShare files or folders with multiple users at once. Select All checkbox, bulk share, bulk revoke β same for both files and folders. Skip already-shared users automatically.
CollaborationCreate/Delete Folders, Create/Delete Users, Change Roles, Manage Users, Manage Documents, View All Shares, Manage Permissions β all individually toggleable.
AdminReal-time stats: total documents, storage used. Time-based greetings. File type icons (PDF, Image, Video, Doc) with metadata per card.
UXBeautiful dark mode by default with smooth light theme toggle. Preference saved locally with flash-of-unstyled-content prevention.
UXMobile-first responsive layout with slide-out sidebar, touch-friendly controls, adaptive grids, and a dedicated mobile menu for phones and tablets.
UXReal-time feedback for every action: success, error, info. Auto-dismiss with smooth animations. Color-coded icons for instant recognition.
UXShare entire folders with View or Edit & Upload permissions. Shared folder contents automatically visible to recipients β including nested subfolders.
CollaborationDeleted files move to Trash for 30 days β restore anytime or delete forever. Empty Trash for admins, auto-purge after the safety window closes.
Data SafetyPDFs, images, videos, audio and text files open instantly in a secure modal β no download needed, no leaving the app. Previews are audit-logged.
UXEvery login, logout, upload, download, preview, share, revoke, trash, restore and payment is recorded with user, time and IP β filterable and CSV-exportable.
ComplianceSend password-protected, expiring public links to people outside your organization β download on/off control, view counting, instant revoke.
CollaborationPlatform owner records payments with auto invoice numbers; paid payments extend subscriptions automatically; companies see their full payment history.
BillingSet expiry per organization from the Organizations panel. Warning banners at 7 days, red pulsing alerts in the final week, login block after expiry until renewal.
Billing30-day upload charts, top users by uploads, most-shared files, storage and share totals β a management-grade overview per organization.
AnalyticsRe-uploading a file with the same name keeps every old version safely. Browse Version History and restore any previous version in one click.
OrganizationStar important files and slice your library instantly: Favorites, PDF, Images, Videos, Docs, plus owner, size and date filters.
UXGenerate a secure upload link β clients submit files without an account straight into your chosen folder, with expiry and close control.
CollaborationDiscuss any file with team comment threads β add and delete comments with full attribution, kept inside the workspace.
CollaborationEach company sets its own display name, logo and primary color β the login screen and dashboard reflect their brand, not yours.
PremiumSee every logged-in device with browser, IP and time. Logout other devices or all devices; idle sessions auto-expire after 30 minutes.
SecurityDownloads and previews stream through your server with ownership, share and permission checks β no exposed Drive links, no 403s for authorized users.
SecurityEvery layer hardened against common attack vectors. Security isn't a feature β it's the foundation.
Every POST validated with a cryptographically secure 32-byte session-bound CSRF token. Auto-attached via global fetch interceptor.
Max 5 attempts with 15-minute lockout. UNIX-timestamp based β timezone independent. Auto-cleanup of expired records.
HttpOnly, Secure (HTTPS), SameSite=Strict flags. Prevents XSS cookie theft and cross-site request forgery via cookie attachment.
All cURL requests enforce SSL_VERIFYPEER + SSL_VERIFYHOST=2 with CA bundle. Man-in-the-middle attacks impossible.
DB credentials, Google Client ID/Secret, admin email β all in a separate config.php never committed to application logic.
100% prepared statements (PDO). Permission keys are whitelisted. No dynamic SQL construction anywhere.
Server-side MIME normalization, filename sanitization via basename(), safe 255-char truncation with extension preserved.
Display errors disabled. Exceptions caught server-side. Generic messages returned to client β no stack traces leaked.
PHP password_hash() with PASSWORD_DEFAULT (bcrypt). Verification via password_verify(). Random 32-char for OAuth accounts.
Google Drive access uses secure tokens with automatic refresh (Authorization Code flow). No Google passwords ever stored.
Files upload directly from browser to your Drive. Disconnect anytime β your data stays with you. Never on our servers.
The platform owner account is hard-coded as undeletable and unmodifiable β no privilege escalation possible.
Every API call verifies that the requested resource belongs to the caller's organization. Cross-tenant access is flatly refused.
Files live in your Drive β compliance ownership stays simple and fully in your hands. Export or disconnect anytime.
Device + IP tracked per login; remote revoke, logout-all-devices, 30-minute idle timeout and 30-day maximum session lifetime.
Tenant-scoped activity logs record who did what, when and from which IP β filterable in-app and exportable as CSV for compliance reviews.
Public links carry bcrypt-hashed passwords, expiry timestamps, download toggles and view counters β fully revocable at any moment.
Every download and preview passes ownership, share and permission verification server-side before a single byte is streamed.
Clear roles for total control. Every user has a specific purpose, ensuring maximum security.
Every action controlled by specific permissions. Admins toggle each capability independently.
| Permission | Super Admin | Company Admin | Master Admin | Admin | User |
|---|---|---|---|---|---|
| Manage Organizations | β Always | β Never | β Never | β Never | β Never |
| Toggle Org Active/Inactive | β Always | β Never | β Never | β Never | β Never |
| Full System Backup | β Always | β Never | β Never | β Never | β Never |
| Tenant Backup | β Always | β Always | β Never | β Never | β Never |
| Connect Google Drive | β (Own tenant) | β Company | β Never | β Never | β Never |
| Disconnect Google Drive | β (Own tenant) | β Company | β Never | β Never | β Never |
| Reset User Passwords | β Always | β Tenant | β Never | β Never | β Never |
| Create Folders/Subfolders | β Always | β Always | β Fixed | β Toggle | β Never |
| Delete Folders/Subfolders | β Always | β Always | β Fixed | β Toggle | β Never |
| Create Users | β Always | β Always | β Fixed | β Toggle | β Never |
| Delete Users | β Always | β Always | β Fixed | β Toggle | β Never |
| Change User Roles | β Always | β Always | β Fixed | β Never | β Never |
| Activate/Deactivate Users | β Always | β Always | β Fixed | β Toggle | β Never |
| Manage Documents (Delete Any) | β Always | β Always | β Fixed | β Toggle | β Never |
| View & Manage All Shares | β Always | β Always | β Fixed | β Toggle | β Never |
| Manage Permissions & Rights | β Always | β Always | β Fixed | β Toggle | β Never |
| Upload Files | β Always | β Always | β Always | β Always | β Toggle |
| Download Files | β Always | β Always | β Always | β Always | β Toggle |
| Delete Own Files | β Always | β Always | β Always | β Always | β Toggle |
| Share Files/Folders | β Always | β Always | β Always | β Always | β Toggle |
| View Activity Logs | β Always | β Always | β Fixed | β Fixed | β Never |
| Record Payments / Set Expiry | β Always | β Never | β Never | β Never | β Never |
| Manage White-Label Branding | β Always | β Company | β Never | β Never | β Never |
| External Links & File Requests | β Always | β Always | β Always | β Always | β Toggle |
| Manage Own Active Sessions | β Always | β Always | β Always | β Always | β Always |
Security and Automation Features Included in Every Plan
Email OTP verification on every login β a 6-digit code with a 10-minute expiry and account lockout after 5 incorrect attempts. Even if your password is stolen, your account remains protected.
Self-service password reset β a secure link sent to your email, valid for 1 hour. Includes company-specific validation, rate limiting, and generic messages to prevent email enumeration.).
Automatically archive or delete old files after X days. Choose the safe Archive mode for compliance, with options to restore or permanently delete files. All actions are recorded in the audit log.
The client uploads a payment receipt or screenshot β The platform owner reviews it in the βPayment Proofsβ folder β Once approved, the subscription is automatically extended.
Discount codes with expiry dates, usage limits, and organization-specific restrictions. Automatically generate promo codes upon training completion β combining marketing and customer retention in one solution.
Each company has its own SMTP server, with a platform-level SMTP fallback. Activation emails, subscription reminders, and payment receipts are built in, with integrated email diagnostics for troubleshooting.
Choose the plan that fits your organization. All plans include full multi-tenant features, enterprise security, and Google Drive integration.
No complex configuration. No technical expertise required. Just five simple steps.
Sign up your company from the login screen. Your admin user, full permissions, and admin rights are provisioned automatically β no waiting.
Company admin connects their corporate Google Drive with one OAuth click. Access & refresh tokens are stored securely. No passwords ever.
Create users (inactive by default) or let them self-register with your company email. Build folder structures, assign roles, set granular permissions.
Drag & drop files, organize into unlimited nested subfolders, bulk-share with View or Edit, and download as ZIP. All safely on your Drive.
Track every action in Activity Logs, review Reports, record payments with auto invoices, and control subscriptions β all from one dashboard.
OwnDriveVault adapts to your workflow β and to any number of organizations on the same platform.
Confidential client files
Employee records
Student records
Patient documents
Media assets
Enterprise security
Audit trails & KYC
Blueprints & contracts
Transform your document management while saving time, money, and headaches.
Leverage existing Google Workspace storage. No servers to purchase or maintain. Save thousands annually.
Files upload directly to YOUR Google Drive. Never touch our servers. Absolute data sovereignty per tenant.
Prevent data leaks by restricting upload, download, delete, share at individual level. 9 admin + 4 user permissions.
Multi-select sharing, bulk revoke, shared-with-me views, ZIP downloads. Keep teams in sync without email chaos.
From 5 users to 5,000 β even across multiple companies. Role hierarchy and tenant isolation ensure security never degrades.
Built-in brute-force protection with configurable lockout. CSRF tokens on every mutation. Protected 24/7.
The 4-tier role system + 9 configurable admin rights means you can delegate operations without ever surrendering ownership.
Complete DB backup and one-click restore protects every user, folder structure, share, and permission. Migrate servers or recover from failures in seconds.
Run one platform for many companies. Each tenant has its own Drive, admins, users, and data β with zero cross-leakage and per-tenant activation control.
Built-in billing, invoices and subscription control let you sell workspaces to companies and get paid on time.
Immutable logs with IP and timestamps satisfy legal, HR and finance reviews β CSV export in one click.
Every company sees its own name, logo and colors β your platform, their brand.
Everything you need to know before getting started.
OwnDriveVault hosts many companies on one platform. Each company ("tenant") gets its own isolated workspace β separate users, folders, documents, shares, permissions, and its own Google Drive connection. Every API call verifies tenant ownership, so no data ever crosses between organizations.
On the login screen, click "Create Company Account". Enter your company name, your name, admin email, and password. Your company workspace, admin user, full permissions, and admin rights are all provisioned in seconds β you can sign in immediately.
Two ways: (1) Admin creates them from the User Management panel β accounts start inactive. (2) Users can self-register from the login screen using your company admin's email. Their account is created inactive and stays that way until an admin activates it.
Directly in your own Google Drive (each company's own Drive). OwnDriveVault uploads files from your browser straight to Google's servers using secure OAuth 2.0 tokens. We only keep lightweight metadata (file name, size, Drive ID) to power the interface β actual files never touch our servers.
Five tiers: Super Admin (platform owner β manages all tenants), Company Admin (tenant super admin β controls their own company), Master Admin (fixed full admin rights, everything except Drive connect), Admin (customizable via 9 granular rights), and User (works within permission boundaries you define).
The Super Admin (platform) or Company Admin (their tenant) can reset any user's password from the User Management panel. Click the 3-dot menu next to the user β "Reset Password" β set a new one β share it with them.
Yes! OwnDriveVault supports unlimited depth nesting. Create a main folder, add subfolders inside it, then add sub-subfolders inside those, and so on. Each level maps to a real folder in Google Drive. Navigate with clickable breadcrumbs showing the full path.
Yes. Multi-file uploads show a live progress bar with Skip File and Cancel All buttons. Skipped files are automatically cleaned from Google Drive to prevent orphans. Real-time percentage, status message, and "File 2/5" queue label keep you informed.
Any Google account works, but we recommend Google Workspace for businesses β larger storage pools, admin console control, and enterprise-grade Google security for the underlying Drive. For multi-tenant deployments, each tenant should use their own Workspace account.
Their system access is revoked immediately, their permissions and shares are removed, and their dedicated Drive folder is deleted recursively (including any nested content). Shared company folders and other users' documents remain completely safe.
Yes! Super Admin can download a complete .sql backup of the entire platform (all tenants, users, roles, permissions, folders, documents, shares, Drive connections). Company Admins get a tenant-scoped .sql backup. Restore with one click β validated for OwnDriveVault signature before touching the DB.
There are zero restrictions. Your team can upload any file format (.pdf, .docx, .exe, .apk, .iso, .zip, video files, unknown formats) and any file size (100MB, 1GB, or larger). Every file gets proper database tracking with icon, size, and uploader info.
OwnDriveVault performs automatic recursive cleanup. When you delete a user, their entire Google Drive folder and contents are permanently removed. When you delete a folder, all nested subfolders and files inside it are deleted from both the database and Google Drive simultaneously. Zero orphaned files.
Yes! Select multiple files using the checkboxes (or "Select All"), then click "Download ZIP". The ZIP is generated entirely in your browser using JSZip β no server storage, no size limits, no timeouts. Skip and Cancel buttons let you control long downloads.
Absolutely. Use the built-in Backup & Restore feature. Download a complete .sql snapshot, install OwnDriveVault on the new server with the same Google Drive connection, upload the backup file, and your entire system β users, folders, shares, permissions β is restored exactly as it was. Files on Google Drive remain untouched.
Super Admin / Company Admin can disconnect Drive anytime. Stored access & refresh tokens are removed from the database, uploads stop for all users, and existing files remain 100% safe on Google Drive. Reconnect later with a single OAuth click β nothing is lost.
It moves to Trash for 30 days where you can Restore it or Delete Forever immediately. Admins can Empty Trash for the whole organization. After 30 days, Trash auto-purges permanently from Drive and the database.
Yes β PDFs, images, videos, audio and text files open in a secure in-app preview modal. Every preview is recorded in Activity Logs for compliance.
Yes. File Requests provide a public upload dropbox link, and External Share Links provide password-protected, expiring view/download links β both fully controlled and revocable by you.
The platform owner sets an expiry date per organization and records payments (invoice number auto-generated). Paid payments auto-extend the subscription. Companies see warning banners before expiry, and login is blocked after expiry until renewal.
Every login, logout, upload, download, preview, share, revoke, trash, restore, permanent delete, payment and settings change is written to Activity Logs with user, time and IP β filterable in-app and exportable as CSV.
Yes. Re-uploading a file with the same name in the same location creates a new version. Open Version History to view sizes/dates and restore any previous version safely.
Active Sessions shows every device with browser, IP and login time. You can revoke a single session, logout other devices, or logout all devices instantly. Idle sessions auto-expire after 30 minutes.
Yes β every tenant can set its own display name, logo URL and primary color (white-label). The login screen and dashboard reflect the company's brand.
Links use unguessable random tokens, optional bcrypt-hashed passwords, expiry dates, a download on/off toggle and view counters. Revoke anytime and the link dies instantly.
Yes β every file supports comment threads. Team members add comments with full attribution; authors and admins can delete them.
Create your company workspace or join an existing one. Setup takes less than 5 minutes.
Get Started Now β It's FreeFill in your details β our team will send you the training link within 24 hours.