SK Drive Features

Engineering capabilities catalog

Explore the architecture, database constraints, and visual flows powering SK Drive.

01

Tenant-Isolated Uploads — STS credentials generation

Generate temporary, scoped AWS STS keys dynamically. Secure uploads bypass application servers and write directly to tenant-restricted S3 space.

fig 01 · sts credentials generation client upload init GET /v1/files/upload-key org_id: org_01 AWS STS Key Scoper requests temporary AWS credentials · locks session prefix to org_id policy = { prefix: 'tenant_org_01/*' } scoped STS credentials ✓ valid for 15 minutes direct upload authorized
api ingest queue push pushed ✓

High performance gates live

Scaled to process inbound workloads in sub-100ms with strict rate-limits protections.

verify key check table 1 entry

Idempotency safeguards live

All writes request carrying idempotency keys are deduplicated instantly at API gateways.

tenancy check apply policy isolated ✓

Row-Level Security live

Database layer RLS policies isolate organization records from adjacent workspaces.

02

Pluggable Storage Backends — AWS S3, Cloudflare R2 & Local filesystem

Switch storage systems seamlessly. Swap from AWS S3 in production to local filesystem directories in staging with zero code modifications.

fig 02 · aws s3, cloudflare r2 & local filesystem write request incoming payload size: 14MB detecting provider Storage Provider Switcher env.DRIVE_PROVIDER: cloudflare_r2 bucket: sk-drive-production client: S3ClientConfig R2 ACTIVE ✓ object committed ✓ written in Cloudflare
api ingest queue push pushed ✓

High performance gates live

Scaled to process inbound workloads in sub-100ms with strict rate-limits protections.

verify key check table 1 entry

Idempotency safeguards live

All writes request carrying idempotency keys are deduplicated instantly at API gateways.

tenancy check apply policy isolated ✓

Row-Level Security live

Database layer RLS policies isolate organization records from adjacent workspaces.

03

Image & File Pipeline — automated compression & WebP transformation

Resize, crop, and convert images on the fly. Compress large PDFs automatically during ingestion to optimize disk footprint.

fig 03 · automated compression & webp transformation raw asset source image.png (size: 4.8MB) type: image/png Sharp Image Transformer Pipeline rescales to WebP format · scales quality threshold to 82% format = webp · quality = 82 optimized image stored ✓ compressed size: 342KB savings: ~92% space
api ingest queue push pushed ✓

High performance gates live

Scaled to process inbound workloads in sub-100ms with strict rate-limits protections.

verify key check table 1 entry

Idempotency safeguards live

All writes request carrying idempotency keys are deduplicated instantly at API gateways.

tenancy check apply policy isolated ✓

Row-Level Security live

Database layer RLS policies isolate organization records from adjacent workspaces.

04

Sharing Policies — Row-Level Security scopes

Enforce document boundaries directly in the database. PostgreSQL RLS shields document records and metadata, blocking cross-tenant reads.

fig 04 · row-level security scopes read object request file_id: f_018A headers: tenant_JWT Row-Level Security checking db enforces (tenant_id = current_setting('app.tenant_id')) access_grant = allowed presigned URL issued ✓ expires: 60 seconds secure link generated
api ingest queue push pushed ✓

High performance gates live

Scaled to process inbound workloads in sub-100ms with strict rate-limits protections.

verify key check table 1 entry

Idempotency safeguards live

All writes request carrying idempotency keys are deduplicated instantly at API gateways.

tenancy check apply policy isolated ✓

Row-Level Security live

Database layer RLS policies isolate organization records from adjacent workspaces.

05

Multipart Uploads Orchestration — large file partition gates

Split huge files up to 5TB into smaller chunks. Orchestrates concurrent multipart chunk ingestion and handles failures gracefully.

fig 05 · large file partition gates large asset target size: 1.4GB video status: uploading Multipart Chunk Manager orchestrates 28 chunk transfers · triggers parallel S3 write commands chunks_transferred: 28/28 multipart merge completed ✓ file checksum validated file status = active
api ingest queue push pushed ✓

High performance gates live

Scaled to process inbound workloads in sub-100ms with strict rate-limits protections.

verify key check table 1 entry

Idempotency safeguards live

All writes request carrying idempotency keys are deduplicated instantly at API gateways.

tenancy check apply policy isolated ✓

Row-Level Security live

Database layer RLS policies isolate organization records from adjacent workspaces.

Looking for API specifications?

SDK scripts, payload schemas, and webhook models are documented on the developers page.

Developers →