UploadWizard

Documentation

UploadWizard is a white-label file-intake platform. Your business gets a branded portal on your own domain where your clients sign in and upload files straight into your own cloud storage. This page walks a business administrator through setup and explains what the client experience looks like.

Concepts

  • Tenant — your business. Each tenant has its own subdomain (or custom domain), branding, storage, and member directory.
  • Client — one of your end users. Clients sign in passwordlessly and see only their own uploads.
  • Passwordless auth — sign-in is an email magic link plus a 6-digit code (15-minute, single-use). No passwords to manage.

Admin quick start

  1. Sign in at /admin on your portal with an administrator email.
  2. Connect your member directory (Integrations → Database). UploadWizard queries your existing member table/view read-only to authorize which client emails may sign in. The connection password is encrypted at rest.
  3. Choose client display fields — pick which columns from your member directory label each client in your uploads list.
  4. Connect storage (Integrations → File Upload Storage). Bring your own S3-compatible bucket (Wasabi, AWS, Backblaze, MinIO), Azure Blob, or Google Cloud Storage. Configure CORS on the bucket to allow browser uploads. Secrets are encrypted at rest.
  5. Brand your portal (Branding) — display name, logo, favicon, accent color, default theme, and an optional intro message shown to clients.
  6. Add your domain (Domains) — use your subdomain or attach one custom domain (CNAME it to your subdomain; a certificate is issued automatically).
  7. Set limits & retention — maximum upload size, allowed file types, and how long files are kept.

How uploads work

Files upload directly from the client's browser to your storage bucket using short-lived presigned URLs — file contents never pass through or get stored on UploadWizard's servers. UploadWizard keeps only metadata (name, size, type, timestamp) to display and manage the uploads list.

The client experience

  1. Your client visits your portal and enters their email.
  2. They receive a magic link and a 6-digit code and sign in.
  3. They drag and drop files, watch live upload progress, and can review — and, if you allow it, delete — their own uploads.

Security & privacy

  • Uploaded files live in your storage — see the Privacy Policy.
  • Storage and database credentials are encrypted with HashiCorp Vault transit encryption; the app decrypts them in memory only at the moment of use.
  • The optional audit log is zero-knowledge: entries are encrypted with your own key, which UploadWizard never holds. Keep your passphrase and BIP39 recovery phrase safe — see the Terms of Use.

See also the DMCA Policy for copyright notices.

Third-party notices

UploadWizard is built with open-source components, used under their respective licenses:

  • Astro, @astrojs/node — MIT
  • AWS SDK for JavaScript (S3) — Apache-2.0
  • @azure/storage-blob — MIT · @google-cloud/storage — Apache-2.0
  • pg — MIT · mssql — MIT · nodemailer — MIT-0 · archiver — MIT
  • stripe — MIT · buffer — MIT
  • libsodium-wrappers-sumo — ISC · bip39 — ISC
  • Font Awesome Free — icons CC BY 4.0, fonts SIL OFL 1.1, code MIT