Full Feature Set

Everything You Need.
Nothing You Don't.

TenzoShare is a complete, self-contained file exchange platform. No external SaaS dependencies. No vendor lock-in. Built to be extended.

Architecture

API-First, Fully Segregated

api

REST API

Comprehensive REST API for all operations. Full Swagger / OpenAPI 3 documentation served automatically. Integrate with any tool, language, or CI/CD platform.

devices

Four Decoupled Front-Ends

Four purpose-built SPAs — Client Portal, Admin Portal, File Request, and File Download. Each is independently deployable and replaceable. Public-facing pages carry zero auth state or admin routes.

terminal

CLI & SDK Phase 3

The fully documented REST API is your integration surface today — automate from any HTTP client or script. Native CLI and language SDKs are on the Phase 3 roadmap.

Microservice Architecture
4 SPAs — pure API consumers
Client Portal
Admin Portal
File Request Page
File Download Page
arrow_forward
Traefik v3 Gateway · TLS · Routing · Rate Limiting
arrow_forward
Backend Services — gRPC (Connect) + REST
Auth
Transfer
Storage
Upload
Notify
Audit
Admin
arrow_forward
NATS JetStream · Async Event Bus
arrow_forward
PostgreSQL 17
Redis 7
MinIO
File Operations

Powerful File Management

upload_file

Encrypted Uploads

Files are encrypted with AES-256-GCM on the server immediately upon upload. Zero plaintext stored to disk.

share

Shareable Links

Generate short-lived, optionally password-protected share links. Set expiry times and download limits per link.

folder_zip

Folder & Batch Operations

Organise files into folders. Bulk download, bulk delete, and batch share operations via API.

history

Version History

Keep multiple versions of files. Restore previous versions at any time with full audit trail per version.

visibility

View-Only Mode

Serve files in a view-only mode — recipients can preview but not download the original file.

download_done

Chunked Uploads

Large file uploads are handled in resumable chunks. Network interruptions won't lose your progress.

Secure File Transfer & File Request Workflows
Transfer — recipient download page
Transfer recipient download page
File Request — recipient upload page
File request upload page
Storage

Any Storage, Any Scale

Connect TenzoShare to your existing infrastructure. Mix backends per-project. Migrate without data loss.

cloud
AWS S3
cloud
Azure Blob
cloud
Google GCS
storage
Local Volume
dns
NFS / SMB
category
MinIO / S3-compat
Admin portal — Storage Insights
Admin storage insights dashboard
User Management

Fine-Grained Access Control

manage_accounts

User Roles & RBAC

Four roles — admin, user, guest, auditor — with enforcement at every API endpoint via middleware.

group

Teams & Workspaces

Organise users into teams. Share files and folders with specific teams. Isolated workspaces per project or department.

vpn_key

API Key Management

Create scoped API keys for service accounts. SHA-256 hashed, shown once, revocable at any time.

people

Guest Access

Allow unauthenticated guest uploads or downloads via time-limited tokens. Rate-limited and fully audited.

White-Label Branding

Deploy Under Your Brand. Pixel Perfect.

TenzoShare disappears behind your identity. Every color, shape, name, and pixel is yours to control — applied consistently across all portals, public pages, and outgoing emails.

palette Primary & Accent Colors
format_paint Surface & Background
text_fields Text Colors
badge App Name & Logo
rounded_corner UI Shape & Radius
code Custom CSS
admin.yourdomain.com / settings / branding
TenzoShare admin branding settings panel
light_mode
Light & Dark Mode — Both Branded

Admins configure separate color palettes for light mode and dark mode. Every color token — primary, surface, accent, text — can be set independently for each mode so your brand stays consistent regardless of user preference.

dark_mode
User-Controlled Theme Toggle

End users can switch between light and dark mode directly from the UI. Their preference is persisted per-session. Both modes render your custom colors, logo, and name — TenzoShare stays invisible.

Technology

A Modern, Purposeful Stack

Every technology choice is deliberate — the best tool for the job, with production-grade versions pinned and tested across the board.

code
Backend
Go · REST · gRPC (Connect)
Go
Fiber
Connect (gRPC)
pgx (PostgreSQL)
go-redis
golang-jwt/jwt
tusd (Tus resumable)
NATS JetStream client
web
Frontend
4 SPAs · React 19 · TypeScript 6
React
TypeScript
Tailwind CSS
shadcn/ui
TanStack Query
Zod
react-router
tus-js-client
dns
Infrastructure
Docker Compose · Swarm · Helm (Phase 2)
Traefik (gateway)
PostgreSQL
NATS JetStream
Docker Compose
Prometheus
Grafana Loki
Grafana
MinIO
Observability

Full-Stack Observability, Out of the Box

Prometheus metrics, Loki log aggregation, and Grafana dashboards — all pre-configured and shipped as optional Docker Compose profiles. Every service exposes /metrics and emits structured JSON logs.

1

Docker Logs Only

Default. No extra containers. docker compose logs gives you everything.

COMPOSE_PROFILES=
Best for: local dev, quick eval
2

Built-In Stack

Prometheus + Loki + Promtail + Grafana spin up alongside your app. One flag enables full observability.

COMPOSE_PROFILES=observability
Best for: self-hosted, no existing monitoring
3

BYO Tools

Each service exposes /metrics and structured JSON logs. Point your Splunk, Datadog, or Elastic stack straight at them.

COMPOSE_PROFILES= + your driver
Best for: orgs with existing tooling
Grafana — TenzoShare API Metrics dashboard (per-service goroutines, CPU, memory, GC)
TenzoShare Grafana metrics dashboard

Ready to deploy TenzoShare?

Get up and running in minutes with a single Docker Compose command.