NEW Your files now live in a bucket in your own AWS account

Retire the file server in the closet. Keep the drive letters.

ArcQuorum builds a managed Windows file server, directory and VPN in your company's own AWS account. Every PC gets a sync app that works offline, locks files people are editing and never throws away a conflicting save. One admin portal runs all of it.

Your AWS account, your keysWindows 10 & 11Offline-first sync
arcquorum · live systemverified
Drive PCs sync through ArcQuorum Control to Amazon FSx and your own S3 bucket in your AWS account, over a WireGuard VPN ENG-07Drive · online FIELD-04Drive · offline pin ACCT-02Drive · locked file Control policy · audit integrity check Amazon FSxS:\ P:\ H:\ S3 bucketversioned WireGuard VPN · only public port is the VPN
  • 10:42:07policy.signedEd25519 · device policy → ENG-07OK
  • 10:42:09integrity.quorumafp1 fingerprint · 3 of 3 agreeOK
  • 10:42:11auth.mfaauthenticator code · dana.rOK
  • 10:42:12audit.appendlock · Line-4 Layout.dwgOK
PCs verified42 / 42
Conflicts lost0
Data locationus-east-1
MFA for every account Runs in your AWS account File locks & release states Full version history Complete audit trail, append-only Ed25519-signed device policy WireGuard is the only public port Private bucket, TLS-only access
Why firms switch

The file server works, until the day it doesn't

A single server in the office, a VPN half the team avoids, and a consumer sync tool someone installed to get around both. ArcQuorum replaces all three with one system you can see and control.

Today the closet server

  • One on-site server holds every project, and backups depend on someone checking them.
  • Remote staff copy files to personal cloud folders so they can work offline.
  • Two people open the same drawing, and the last save wins.
  • Nobody can say which laptops still have company files on them.

With ArcQuorum your cloud

  • Files live on Amazon FSx and in an S3 bucket in your AWS account, encrypted with your key.
  • Drive keeps pinned projects on the laptop and syncs when it's back online.
  • Locks show who is editing, and a conflicting save is kept as its own version.
  • Every PC is enrolled and verified, and can be blocked or wiped from the portal.
The platform

Three parts. One system.

The portal your administrators use, the app your people use, and the infrastructure that holds the files, all in your own cloud.

ARCQUORUM CONTROL

The admin portal

  • Users, groups, divisions and roles, with authenticator sign-in for everyone
  • Enroll PCs, push policy, and block or wipe a lost laptop
  • Deploy and change infrastructure in your cloud, with approvals
  • Storage, alerts, cost and a full audit trail
ARCQUORUM DRIVE FOR WINDOWS

The sync app people use

  • Pin a project for offline work; it syncs when the laptop reconnects
  • File locks with release states for drawings and PLC programs
  • Conflicts preserved as versions, never overwritten
  • Recents, favorites, search and a recovery timeline
YOUR AWS ACCOUNT

Where the files live

  • Amazon FSx for Windows with normal NTFS permissions
  • Your Windows domain and Group Policy drive maps
  • A WireGuard VPN whose only public port is the VPN itself
  • ArcQuorum Edge keeps FSx and Drive in step
S:\ SharedP:\ ProjectsH:\ Home
Everything included

Built for firms whose files matter

Engineering drawings, PLC programs, estimates and contracts: work that can't be lost to the "newest file wins" rule or to a laptop left in a truck.

Files & sync

Offline pins

Keep a project on the laptop for the job site. Changes sync when it reconnects, and admins can deny pins by folder or file type.

Locks & release states

See who is editing a drawing. Draft, For review and Released states stop accidental edits to finished work.

Conflicts preserved

A save made against an old version becomes its own named version. Both people are told, and nothing is overwritten.

Version history

Restore any earlier version or a deleted file from the portal or on the PC, with a recovery timeline.

Projects & search

Projects, favorites, recents and search across every share you may open, with availability shown at a glance.

ArcQuorum Edge

Connect on-premises or FSx file servers. Edge keeps replicas in step using the same version rules as Drive.

Security & identity

MFA & sessions

Authenticator sign-in for every account, with recovery codes and session limits you set.

Entra ID & SCIM

Sign in with Microsoft Entra ID. People and groups follow your directory, and leavers lose access immediately.

App integrity

Only approved builds of Drive and Control may touch files, confirmed by three independent parties.

Division-scoped roles

Global Admin, Division Admin, Helpdesk, Auditor and more. Every permission is checked on the server.

Device control

Signed device policy and per-PC credentials. Block, retire or remotely wipe a lost laptop through Intune.

Audit trail

Every admin action is recorded and archived, and never deleted by the application.

Cloud & operations

Your own bucket

Every version synced through ArcQuorum is stored in an encrypted, versioned S3 bucket in your account.

Blueprints with approvals

Network, domain, VPN and FSx are built in your AWS account only after you approve the plan.

Live inventory & cost

Servers, file systems, VPN, budgets and month-to-date cost, refreshed every 15 minutes.

Alerts that deduplicate

Offline PCs, low disk, storage nearing the limit, stale backups and failed checks, each raised once and auto-resolved.

Typed remote commands

Refresh policy, collect logs, resync or wipe. A closed set of commands, never a remote shell.

Works with Claude

Ask the portal questions in plain English. The assistant acts with your roles, and every change is audited.

Nobody's work gets overwritten

Two people saved the same drawing. Both saves are still there.

Drive knows which version each save started from. If someone else saved first, the second save becomes its own clearly named version and both people are told. "Newest file wins" is how weeks of engineering get lost. ArcQuorum doesn't work that way.

Line-4 Layout.dwg1 conflict kept
v14Line-4 Layout.dwgDana R. · 10:42 · from v13
v14aLine-4 Layout (conflict, Luis M.).dwgLuis M. · 10:44 · from v13
v13Line-4 Layout.dwgDana R. · 09:15 · from v12
lockLocked for editing by Dana R. · state For reviewexpires 12:00
App integrity

Only genuine, approved software touches your files

Each release of Drive and Control has a fingerprint of all its program files. A validator in your AWS account checks Control on a schedule, and each PC proves its app is genuine before it may sync.

Off

Fingerprints are recorded but not checked. The starting point for existing tenants.

Monitor

Every PC is verified and failures alert the admin, but nobody is stopped.

Enforce

A PC with an unknown or altered app pauses corporate sync until it verifies again.

Quorum checkP:\Line-4 Retrofit\PLC\main.acd
ENG-LAPTOP-07 · Drive 0.3.1afp1:e8056a957039…bf502a3dcf1f5
Agrees
ArcQuorum Controlapproved release · user verified with authenticator
Agrees
Validator in your AWS accountsigned trust status · KMS P-256
Agrees
Sync allowedsession key valid 60 min · offline grace 24 h

Before a PC may sync, three independent parties must agree its app is genuine. Try tampering with it.

Your cloud, your keys

We manage your infrastructure. We never own it.

You grant access through a CloudFormation stack you can read, pause or delete at any time. Explicit denies, tested against every function ArcQuorum performs, mean it can never:

Read your files or your passwords
Create IAM users or access keys, or change its own permissions
Approve its own code or silence an integrity alert
Turn off CloudTrail or other auditing
Delete anything it didn't create
Work outside the regions you allow, or touch DNS you didn't delegate
ReadOnlyhealth, inventory, cost Operatorday-to-day changes, can be paused Deployerapproved deployments only, can be paused
Storage & remote access

See every byte, and every connection

The Storage page shows what you store, where it lives and who wrote it. The VPN appears as a secure gateway with live health and each person's last connection.

Usage against your plan, current files versus history, by share and by PC
Alerts at 80% and 95% of the plan, and when your bucket stops answering
VPN peers read with a read-only command; private keys never leave the server
Stored against the planbucket reachable
Current files2.4 TB
Version history700 GB
s3://arcquorum-content-…3.1 TB
Written by ArcQuorum Drive1.9 TB
Office VPN · WireGuardhealthy
laptop-dana · 10.99.0.11connected
field-pc-04 · 10.99.0.122 h ago
estimating-01 · 10.99.0.13connected
Works with Claude

Ask your file platform questions in plain English

Connect Claude or another AI assistant to ArcQuorum Control with a single sign-in. It acts as you, with your roles and nothing more, and every change it makes is written to the audit log.

Which PCs are low on disk, and how much are we storing?
Two PCs have less than 20 GB free: FIELD-PC-04 (11 GB) and EST-LAPTOP-02 (17 GB). You store 3.1 TB, 62% of your plan, all of it in your own bucket.infrastructure:read · via ArcQuorum Control
Collect the logs from FIELD-PC-04.
Sent "Collect logs" to FIELD-PC-04. It's in the audit log under your name.commands:write · audited
Getting started

From first call to first synced project

  1. Connect AWS

    Create one CloudFormation stack from the portal. It gives ArcQuorum three limited roles, never an admin key.

  2. Approve the blueprint

    Review the plan, approve it, and ArcQuorum builds the network, directory, VPN, FSx and your content bucket.

  3. Enroll your PCs

    Install ArcQuorum Drive with an enrollment token. Each person registers an authenticator on first sign-in.

  4. Move the projects

    Copy files into the new shares. Drive and the mapped drives see the same folders and permissions.

Pricing

Priced per company, not per gigabyte

AWS bills your cloud costs directly to you, at AWS prices. Your ArcQuorum plan covers the software, the portal and our operations.

Trial

Free for 30 days
  • 10 users, 10 PCs
  • 1 Edge server
  • 50 GB stored
  • 30-day version history
Start free

Team

$490 / month
  • 25 users, 50 PCs
  • 3 Edge servers
  • 500 GB stored
  • 90-day version history
Choose Team

Enterprise

Custom
  • Unlimited users, PCs, Edge servers
  • Unlimited storage
  • 10-year version history
  • Everything in Business
Talk to sales

Every plan includes ArcQuorum Drive, app integrity, MFA, the audit trail and storage in your own AWS account.

AWS cost

What AWS will bill you

Calculated from AWS list prices for the resources ArcQuorum deploys in your account. Pick a size and the features you need; every line shows its quantity and unit price.

At AWS On-Demand list prices in us-east-1, a pilot costs about $136 a month ($31 a week) and a 50-person production setup about $933 a month, excluding tax.

Questions

What people ask before a pilot

Can ArcQuorum read our files?

No. Files live in Amazon FSx and in an S3 bucket in your AWS account. The roles you grant ArcQuorum explicitly deny reading your data and secrets. Control keeps only file metadata (names, versions, locks), never file contents.

What happens when the internet goes down?

Pinned projects stay on the laptop and can be edited offline. Drive syncs when the connection returns, and keeps a conflicting save as its own version instead of overwriting someone else's work.

Do we keep our drive letters and permissions?

Yes. FSx for Windows keeps normal NTFS permissions, and Group Policy maps the same drive letters. Drive shows the same folders with the same access.

What does it cost in AWS?

A pilot costs about $31 a week ($136 a month) at AWS list prices, calculated from the resources it deploys. Production cost depends on storage, throughput and servers: try the AWS cost calculator. The portal shows month-to-date cost and your AWS budgets, so there are no surprises.

How do we leave?

Delete the ArcQuorum access stack and ArcQuorum loses all access. Your file system, directory, VPN and bucket stay in your account and keep working without us.

Which PCs are supported?

Windows 10 and 11 (x64). Drive installs with an enrollment token and can be deployed with Intune or any software-distribution tool.

Pilot program

Prove it in your own AWS account first

A pilot builds a complete, disposable copy of the setup next to your current server: domain, VPN, FSx shares with drive maps, and ArcQuorum Drive on a few test PCs. Keep it if it works, or tear it down in one step if it doesn't.

Runs in
Your AWS account, your region
Test users
Engineering, accounting, management, admin
Cloud cost
About $31 per week at AWS list prices, billed by AWS (calculate yours)
Clients
Windows 10 and 11
Scoping
One call: people, sites and where your files live today