NEW Your files now live in a bucket in your own AWS account
Retire the file server in the closet. Keep the drive letters.
ArcQuorum builds a managed Windows file server, directory and VPN in your company's own AWS account. Every PC gets a sync app that works offline, locks files people are editing and never throws away a conflicting save. One admin portal runs all of it.
10:42:09integrity.quorumafp1 fingerprint · 3 of 3 agreeOK
10:42:11auth.mfaauthenticator code · dana.rOK
10:42:12audit.appendlock · Line-4 Layout.dwgOK
PCs verified42 / 42
Conflicts lost0
Data locationus-east-1
MFA for every accountRuns in your AWS accountFile locks & release statesFull version historyComplete audit trail, append-onlyEd25519-signed device policyWireGuard is the only public portPrivate bucket, TLS-only access
Why firms switch
The file server works, until the day it doesn't
A single server in the office, a VPN half the team avoids, and a consumer sync tool someone installed to get around both. ArcQuorum replaces all three with one system you can see and control.
Today the closet server
One on-site server holds every project, and backups depend on someone checking them.
Remote staff copy files to personal cloud folders so they can work offline.
Two people open the same drawing, and the last save wins.
Nobody can say which laptops still have company files on them.
With ArcQuorum your cloud
Files live on Amazon FSx and in an S3 bucket in your AWS account, encrypted with your key.
Drive keeps pinned projects on the laptop and syncs when it's back online.
Locks show who is editing, and a conflicting save is kept as its own version.
Every PC is enrolled and verified, and can be blocked or wiped from the portal.
The platform
Three parts. One system.
The portal your administrators use, the app your people use, and the infrastructure that holds the files, all in your own cloud.
ARCQUORUM CONTROL
The admin portal
Users, groups, divisions and roles, with authenticator sign-in for everyone
Enroll PCs, push policy, and block or wipe a lost laptop
Deploy and change infrastructure in your cloud, with approvals
Storage, alerts, cost and a full audit trail
ARCQUORUM DRIVE FOR WINDOWS
The sync app people use
Pin a project for offline work; it syncs when the laptop reconnects
File locks with release states for drawings and PLC programs
Conflicts preserved as versions, never overwritten
Recents, favorites, search and a recovery timeline
YOUR AWS ACCOUNT
Where the files live
Amazon FSx for Windows with normal NTFS permissions
Your Windows domain and Group Policy drive maps
A WireGuard VPN whose only public port is the VPN itself
ArcQuorum Edge keeps FSx and Drive in step
S:\ SharedP:\ ProjectsH:\ Home
Everything included
Built for firms whose files matter
Engineering drawings, PLC programs, estimates and contracts: work that can't be lost to the "newest file wins" rule or to a laptop left in a truck.
Files & sync
Offline pins
Keep a project on the laptop for the job site. Changes sync when it reconnects, and admins can deny pins by folder or file type.
Locks & release states
See who is editing a drawing. Draft, For review and Released states stop accidental edits to finished work.
Conflicts preserved
A save made against an old version becomes its own named version. Both people are told, and nothing is overwritten.
Version history
Restore any earlier version or a deleted file from the portal or on the PC, with a recovery timeline.
Projects & search
Projects, favorites, recents and search across every share you may open, with availability shown at a glance.
ArcQuorum Edge
Connect on-premises or FSx file servers. Edge keeps replicas in step using the same version rules as Drive.
Security & identity
MFA & sessions
Authenticator sign-in for every account, with recovery codes and session limits you set.
Entra ID & SCIM
Sign in with Microsoft Entra ID. People and groups follow your directory, and leavers lose access immediately.
App integrity
Only approved builds of Drive and Control may touch files, confirmed by three independent parties.
Division-scoped roles
Global Admin, Division Admin, Helpdesk, Auditor and more. Every permission is checked on the server.
Device control
Signed device policy and per-PC credentials. Block, retire or remotely wipe a lost laptop through Intune.
Audit trail
Every admin action is recorded and archived, and never deleted by the application.
Cloud & operations
Your own bucket
Every version synced through ArcQuorum is stored in an encrypted, versioned S3 bucket in your account.
Blueprints with approvals
Network, domain, VPN and FSx are built in your AWS account only after you approve the plan.
Live inventory & cost
Servers, file systems, VPN, budgets and month-to-date cost, refreshed every 15 minutes.
Alerts that deduplicate
Offline PCs, low disk, storage nearing the limit, stale backups and failed checks, each raised once and auto-resolved.
Typed remote commands
Refresh policy, collect logs, resync or wipe. A closed set of commands, never a remote shell.
Works with Claude
Ask the portal questions in plain English. The assistant acts with your roles, and every change is audited.
Nobody's work gets overwritten
Two people saved the same drawing. Both saves are still there.
Drive knows which version each save started from. If someone else saved first, the second save becomes its own clearly named version and both people are told. "Newest file wins" is how weeks of engineering get lost. ArcQuorum doesn't work that way.
Line-4 Layout.dwg1 conflict kept
v14Line-4 Layout.dwgDana R. · 10:42 · from v13
v14aLine-4 Layout (conflict, Luis M.).dwgLuis M. · 10:44 · from v13
v13Line-4 Layout.dwgDana R. · 09:15 · from v12
lockLocked for editing by Dana R. · state For reviewexpires 12:00
App integrity
Only genuine, approved software touches your files
Each release of Drive and Control has a fingerprint of all its program files. A validator in your AWS account checks Control on a schedule, and each PC proves its app is genuine before it may sync.
Off
Fingerprints are recorded but not checked. The starting point for existing tenants.
Monitor
Every PC is verified and failures alert the admin, but nobody is stopped.
Enforce
A PC with an unknown or altered app pauses corporate sync until it verifies again.
ArcQuorum Controlapproved release · user verified with authenticator
Agrees
Validator in your AWS accountsigned trust status · KMS P-256
Agrees
Sync allowedsession key valid 60 min · offline grace 24 h
Before a PC may sync, three independent parties must agree its app is genuine. Try tampering with it.
Your cloud, your keys
We manage your infrastructure. We never own it.
You grant access through a CloudFormation stack you can read, pause or delete at any time. Explicit denies, tested against every function ArcQuorum performs, mean it can never:
Read your files or your passwords
Create IAM users or access keys, or change its own permissions
Approve its own code or silence an integrity alert
Turn off CloudTrail or other auditing
Delete anything it didn't create
Work outside the regions you allow, or touch DNS you didn't delegate
ReadOnlyhealth, inventory, costOperatorday-to-day changes, can be pausedDeployerapproved deployments only, can be paused
Storage & remote access
See every byte, and every connection
The Storage page shows what you store, where it lives and who wrote it. The VPN appears as a secure gateway with live health and each person's last connection.
Usage against your plan, current files versus history, by share and by PC
Alerts at 80% and 95% of the plan, and when your bucket stops answering
VPN peers read with a read-only command; private keys never leave the server
Stored against the planbucket reachable
Current files2.4 TB
Version history700 GB
s3://arcquorum-content-…3.1 TB
Written by ArcQuorum Drive1.9 TB
Office VPN · WireGuardhealthy
laptop-dana · 10.99.0.11connected
field-pc-04 · 10.99.0.122 h ago
estimating-01 · 10.99.0.13connected
Works with Claude
Ask your file platform questions in plain English
Connect Claude or another AI assistant to ArcQuorum Control with a single sign-in. It acts as you, with your roles and nothing more, and every change it makes is written to the audit log.
Which PCs are low on disk, and how much are we storing?
Two PCs have less than 20 GB free: FIELD-PC-04 (11 GB) and EST-LAPTOP-02 (17 GB). You store 3.1 TB, 62% of your plan, all of it in your own bucket.infrastructure:read · via ArcQuorum Control
Collect the logs from FIELD-PC-04.
Sent "Collect logs" to FIELD-PC-04. It's in the audit log under your name.commands:write · audited
Getting started
From first call to first synced project
Connect AWS
Create one CloudFormation stack from the portal. It gives ArcQuorum three limited roles, never an admin key.
Approve the blueprint
Review the plan, approve it, and ArcQuorum builds the network, directory, VPN, FSx and your content bucket.
Enroll your PCs
Install ArcQuorum Drive with an enrollment token. Each person registers an authenticator on first sign-in.
Move the projects
Copy files into the new shares. Drive and the mapped drives see the same folders and permissions.
Pricing
Priced per company, not per gigabyte
AWS bills your cloud costs directly to you, at AWS prices. Your ArcQuorum plan covers the software, the portal and our operations.
Every plan includes ArcQuorum Drive, app integrity, MFA, the audit trail and storage in your own AWS account.
AWS cost
What AWS will bill you
Calculated from AWS list prices for the resources ArcQuorum deploys in your account. Pick a size and the features you need; every line shows its quantity and unit price.
At AWS On-Demand list prices in us-east-1, a pilot costs about $136 a month ($31 a week) and a 50-person production setup about $933 a month, excluding tax.
Per month–
Per week–
AWS cost by line item
Resource
Per month
AWS On-Demand list prices, excluding tax. Data transfer and request volumes are estimates.
Questions
What people ask before a pilot
Can ArcQuorum read our files?
No. Files live in Amazon FSx and in an S3 bucket in your AWS account. The roles you grant ArcQuorum explicitly deny reading your data and secrets. Control keeps only file metadata (names, versions, locks), never file contents.
What happens when the internet goes down?
Pinned projects stay on the laptop and can be edited offline. Drive syncs when the connection returns, and keeps a conflicting save as its own version instead of overwriting someone else's work.
Do we keep our drive letters and permissions?
Yes. FSx for Windows keeps normal NTFS permissions, and Group Policy maps the same drive letters. Drive shows the same folders with the same access.
What does it cost in AWS?
A pilot costs about $31 a week ($136 a month) at AWS list prices, calculated from the resources it deploys. Production cost depends on storage, throughput and servers: try the AWS cost calculator. The portal shows month-to-date cost and your AWS budgets, so there are no surprises.
How do we leave?
Delete the ArcQuorum access stack and ArcQuorum loses all access. Your file system, directory, VPN and bucket stay in your account and keep working without us.
Which PCs are supported?
Windows 10 and 11 (x64). Drive installs with an enrollment token and can be deployed with Intune or any software-distribution tool.
Pilot program
Prove it in your own AWS account first
A pilot builds a complete, disposable copy of the setup next to your current server: domain, VPN, FSx shares with drive maps, and ArcQuorum Drive on a few test PCs. Keep it if it works, or tear it down in one step if it doesn't.