Private bucket file control plane

One file gateway for apps, agents, workers, and public media.

EnvyFiles keeps R2/S3 buckets private and moves authorization into a tenant-aware Convex control plane. Apps ask for capabilities. EnvyFiles decides policy, records metadata, and only then issues storage access.

Initial boundaries

• Convex owns tenants, file policies, metadata, status, and audit.
• Clerk owns human identity and product workspace access.
• Service identities own app-to-app and agent calls.
• R2/S3-compatible storage owns bytes only.