Member Avatar for cyberjorge

Hi a friend of mind is planning to put up an online storage website to cater organizations and institutions exclusively.

I want to know what to consider or any suggestion to consider in development. We actually have the list below in mind.

1) sign up/login for members
2) online upload/download
3) encryption (128 BIT AES SSL)
4) share locker with other
5) admin control
6) payment processing

One thing more, how much will this cost for development roughly?
And what do we need to know, to get and to expect with a developer to deal with this project?
.
Thanks in advance.

  • 6 Contributors
  • 7 Replies
  • 272 Views
  • 1 Month Discussion Span
  • Latest Post Latest Post by happygeek

Dani AI

Generated

For 's plan to serve organizations and institutions, start by nailing down requirements: expected users and growth, average and max file sizes, concurrency and throughput, retention and legal-hold rules, required certifications (HIPAA/FERPA/GLBA/GDPR), data residency, SSO/LDAP or SAML needs, integration points (APIs/connectors), and RTO/RPO for disaster recovery. As pointed out, reviewing a few established services will help decide what to build versus what to adopt.

Security and encryption deserve their own spec. The phrase "128 BIT AES SSL" mixes transport and storage terms: use modern TLS for transport (disable old SSL versions) and AES (128/256) with authenticated modes for data at rest. Offer key-management options: provider-managed KMS, customer-managed keys backed by an HSM, or client-side encryption for a true zero-knowledge model. Plan key rotation, key-access logging, certificate lifecycle (OCSP/renewal), and avoid storing plaintext keys with data.

Design the product and operations around real-world workflows: resumable/chunked uploads, server-side deduplication, versioning, fine-grained ACLs/group sharing, per-object audit trails, malware scanning at upload, lifecycle policies, legal-hold, search/indexing, CDN-backed large-file delivery, APIs/SDKs, monitoring/alerts, integrity checks and regular backups. Keep billing separate and use a PCI-compliant gateway if you accept cards.

When talking to developers, require an architecture diagram, security checklist, load/failover test plan, CI/CD and staging strategy, and references for similar systems. Insist on milestone-based payments, acceptance tests, IP/source-escrow or clear ownership, and a maintenance/incident SLA. Costs vary widely: a cloud-first MVP can often be done in the low five-figure range; a hardened, certified enterprise offering typically runs into mid/upper five-figures or more depending on scale and compliance. Finally, be transparent about affiliations and avoid undisclosed promotion - the community here has already flagged that behavior (see , ).

Recommended Answers

All 7 Replies

Member Avatar for JonathanD

I would sign up and look at what www.box.net is doing, they really know how to do it right.

Member Avatar for peter_budo

- in this case it is OK

Member Avatar for darkmobius

Although that is james1700's very own website (no wonder he thinks they have "good design"). He's been spamming his site all over the web.

Member Avatar for darkmobius

Although that is james1700's very own website (no wonder he thinks they have "good design"). He's been spamming his site all over the web.

Been asked to provide evidence (anyone can google themselves):
James Shaw = james1700

There were other posts since deleted where james1700 admitted it was his own site.

Owner of jpshosting = James Shaw

I don't like people who deceive others, like all the genuine posters on this forum.

Member Avatar for peter_budo

- you reported the above post as "posting your personal details". You wrong about it as these data are free to access anyone who care to run "whois" on your website domain or any domain available on the net. Threatening the other member will not help too, so no PMs please

Member Avatar for james1700

Yes the details are available in the whois db but i do not expect them to be published around every forum.

Member Avatar for happygeek

We do not expect members to send other members highly abusive PMs either. So please either calm down or grow up, preferably both...

And it is bad form to advertise your own site/service in the guise of answering a question or being helpful - with no hint that you are recommending your own business. That is treated as spam around these parts...

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.