The honest S3 alternative — hosted in Germany

You don't rewrite a single application. Create a bucket and an API key pair with us, enter the endpoint https://de-fra.i3storage.com with region de-fra, and mirror your objects with rclone directly bucket-to-bucket. rclone verifies checksums, transfers only deltas, and runs parallelized across many streams. Your source stays in production throughout the migration – you only cut the endpoint over in your app once the sync has fully completed. Want client-side encryption? Put rclone crypt in front: your data is encrypted before it ever reaches our storage – the key never leaves your side.

Instead of bucket policies, ACLs or IP filters, intercolo uses a lean, controlled access model: every request is authenticated via API keys with SigV4 signing, and every transfer runs over TLS. For time-limited, shareable downloads you generate presigned URLs without handing out your keys – the URL expires automatically. Rotate keys deliberately by issuing a dedicated key pair per application or per project. And because encryption at rest is deliberately not done on the storage side, you encrypt client-side with rclone crypt, Restic or Cryptomator: the key stays with you, our storage only ever sees ciphertext. No object lock, no versioning, no audit logs – but a model you hold entirely in your own hands.