transferinseconds.comSend files

For IT and security teams

Enough detail to make an informed decision.

Transfer in Seconds is a browser-based, live file handoff. It requires no installation or account and does not place files in Transfer in Seconds cloud storage.

Security posture: encrypted transport, one active receiver, SHA-256 delivery verification, and zero application-level file retention.

Data flow

1. Load

The interface is delivered over HTTPS from Vercel.

2. Signal

Temporary WebRTC connection details are exchanged through our own short-lived connection room.

3. Transfer

The file payload travels over an encrypted RTCDataChannel when possible, with a TLS WebSocket relay fallback when direct connectivity is blocked.

4. Verify

The receiver checks the SHA-256 fingerprint before reporting success.

Network allowlist

The current client uses the following endpoints. Direct WebRTC also needs the organisation's firewall and browser policy to permit RTCDataChannel connectivity.

EndpointProtocolPurpose
transferinseconds.com and www.transferinseconds.comTCP 443Website and transfer interface
transferinseconds-signal.tekniq-tim.workers.devTCP 443 (WSS)Connection signalling and in-memory relay fallback
stun.l.google.comUDP 19302Public-address discovery for direct WebRTC
stun.cloudflare.com and stun.l.google.comUDP 3478/53 and 19302Discovers a direct route between both browsers

Controls and limitations

  • The sender and receiver must keep their browser pages open until completion.
  • Possession of a transfer link or temporary receive code grants the ability to attempt one connection; compare the safety code for higher-assurance handoffs.
  • File contents are not available to our server for antivirus, DLP, eDiscovery, retention, or audit inspection.
  • Restrictive UDP/WebRTC policies trigger the WSS relay fallback. Blocking WebSockets or the connection-service hostname still prevents a transfer.
  • Chrome and Edge can stream large incoming files directly to a user-selected disk location. Other browsers may need to buffer before saving.

Assessment contact

For a security questionnaire, scoped pilot, or current endpoint list, contact hello@transferinseconds.com. See the full security explanation and privacy notice.