ZataSync is a private, self-hosted alternative to Dropbox — devices sync
directly to each other, end-to-end encrypted, with nothing in the middle.
Free forever on your own network; $7/mo unlocks sync from anywhere.
Get ZataSyncSee pricing No credit card to start. The free tier is genuinely free — not a trial.
Sync that stays out of your way
The connectivity is the only thing we run. Your files, your keys, and your
disks stay entirely with you.
Peer-to-peer, end-to-end encrypted
Devices talk directly over QUIC with pinned-certificate mutual auth. Files are encrypted on the wire between your own machines — no server ever sees plaintext, because your files never pass through one.
Sync from anywhere
On the same network it just works, free. Upgrade to Pro and ZataSync coordinates a rendezvous + relay that punches through NAT and CGNAT, so your laptop and your home NAS stay in sync across the internet.
Your hardware, your data
Run it as a desktop app, a container on your NAS, or a headless CLI daemon. There is no ZataSync cloud holding your files — the storage is the disks you already own.
Versioned snapshots
Keep point-in-time versions of synced folders so an accidental delete or a bad save is a restore, not a loss. Retention is yours to set, per folder.
Up and running in minutes
Three steps, then it runs itself.
STEP 1
Install
Grab the desktop app for macOS, Windows, or Linux — or pull the NAS container or CLI daemon.
STEP 2
Pair devices
Pair each device once with a short code. Certificates are pinned on both ends, so they only ever trust each other.
STEP 3
Sync
Add folders and they stay identical in both directions — changes propagate the moment a file is saved.
How ZataSync works in detail
Pro — $7/mo
What the subscription pays for
Two devices on the same network find each other for free, forever. When
they are apart — behind different routers, on mobile networks, behind
CGNAT — someone has to help them meet. Pro runs that rendezvous and,
when a direct hole-punch fails, an encrypted relay.
You are paying for connectivity, not storage. The relay only ever
forwards ciphertext — it cannot read a byte of what passes through it,
and access is enforced server-side, so there is nothing to unlock in
the client itself.
Rendezvous + NAT / CGNAT traversal
Encrypted relay fallback (ciphertext only)
Unlimited devices on your account
Enforced server-side — nothing to crack client-sideCompare Free and Pro
Ready to sync everything?
Start free on your own network. Add sync-from-anywhere the day you need it.