Principles
ZipPigeon should stay narrow and understandable. The product is for private file handoffs, not broad cloud storage. Every roadmap item should make the sender, recipient, access window, encryption boundary, and remaining metadata easier to explain.
Enterprise brand and policy controls
Future enterprise plans include custom logo and theme support, branded recipient pages, organization policy controls, default expiration rules, allowed recipient patterns, download-limit policies, and clearer administrative reporting. These controls should help teams make private delivery feel like their own trusted process without weakening the encryption model.
Bring your own cloud storage and database
The planned enterprise deployment model should support customer-owned encrypted object storage and a customer-owned PostgreSQL-compatible database. That direction gives organizations more control over residency, backup, retention, and infrastructure review while keeping file contents protected in the browser before storage.
What remains future work
Enterprise SSO enforcement, formal compliance reports, customer-managed keys, public key transparency, hardware-backed server controls, and deeper privacy-preserving malware analysis remain future work. Public pages should keep naming these as planned or under evaluation until the controls are shipped and documented.