Skip to main content

Case Study  ·  Built by Elizabeth Lemoine

All your cloud storage.
One place.

Northlight Vault is a free Windows desktop app that lets you browse Google Drive, OneDrive, and Dropbox together — without switching tabs, re-authenticating, or giving any app write access to your files. Built because the problem was real and no existing tool solved it cleanly.

Free download · Windows Download Vault →
3 Cloud services unified
0 Files stored server-side
Free No subscription required
Read-only By design

Most professionals who use cloud storage don't use just one service. They have Google Drive for one client, OneDrive for another, Dropbox from a previous role. Finding anything means opening three browser tabs, signing into each one, navigating separately, and hoping you remembered which service it's actually on.

Existing "unified storage" tools either required write access (a hard no for most professional contexts), synced files locally (unnecessary and slow), or charged a monthly fee for what should be a simple browsing problem. Vault is the simple version of that idea: read-only, local, free, and honest about what it does.

01

Read-only by design

Vault requests read-only OAuth scopes from every connected service — not because it couldn't request more, but because it doesn't need to. The constraint is intentional.

  • Simpler trust model
    Users and IT admins can approve Vault instantly — there's nothing it can do to their files
  • Smaller attack surface
    No write tokens means a compromised session can't modify or delete anything
  • Clearer product scope
    Read-only keeps the product focused — it does one thing and does it well

02

Desktop, not browser

Vault is an Electron app running locally on Windows — not a web service. Credentials stay on the user's machine and the app works independently of any backend infrastructure.

  • No server, no account
    Nothing passes through a Northlight server — OAuth tokens live locally, API calls go direct to each cloud provider
  • Offline-capable metadata
    Browsed folder structures can be cached locally so the app feels fast even on slower connections
  • Native file opening
    Files open in whatever app handles them on your machine — no in-app preview required

03

Free, permanently

Vault has no subscription, no freemium tier, and no plan to add one. The decision to ship it free was strategic, not accidental.

  • Removes the friction barrier
    A free tool gets tried. A paid tool gets evaluated. For a first product from a new name, being tried matters more than capturing revenue
  • Builds the Northlight audience
    Vault users become Aurora Brief subscribers and Northlight brand contacts — the distribution value exceeds any subscription revenue at this stage

04

Privacy-first architecture

The app was designed to be auditable. Every permission request and data flow is explained in plain language on the download page — not buried in a privacy policy.

Browse files across Google Drive, OneDrive, and Dropbox
Open files in your local default applications
Search across connected accounts
Stay signed in between sessions
Move, rename, delete, or modify any files
Sync files locally or cache file content
Send any data to Northlight servers

Vault connects to each cloud provider directly using their official APIs and OAuth 2.0. When a user connects an account, they authenticate in their browser through the provider's own login flow — Vault never sees or stores passwords.

OAuth 2.0 per service
Each cloud provider authenticates independently — tokens are stored locally and never sent to Northlight
Direct API calls
File metadata is fetched directly from Google Drive, OneDrive, and Dropbox APIs — no proxy or intermediary server
Read-only scopes only
Google Drive: drive.readonly · OneDrive: Files.Read · Dropbox: files.metadata.read
Local credential store
Tokens are encrypted and stored in the OS credential vault — not in a plaintext config file
AI-assisted development
Generative AI was used throughout development — for boilerplate, edge-case handling, and API integration patterns
ClickUp for project tracking
Development tasks, bug reports, and release milestones tracked in ClickUp throughout the build
Electron Node.js Google Drive API Microsoft OneDrive API Dropbox API OAuth 2.0 ClickUp GitHub Generative AI
ProjectNorthlight Vault — Cloud File Browser for Windows
RoleDesigner, Developer, and Product Owner (solo)
IndustryTechnology · Productivity Software
MethodologyAgile — iterative development with continuous user feedback cycles
ScopeWindows desktop application (Electron + Node.js) integrating three cloud storage APIs via OAuth 2.0. Read-only by design. No server-side infrastructure. Free distribution via direct download.
OutcomeLive product available as a free Windows download. Solves a real daily friction point for multi-cloud users without requiring write access, server trust, or a subscription. Privacy practices documented transparently on the product page.
Aurora Brief
Stay in the Loop with Northlight
Clear thinking. Real results. Strategy insights, operations learnings, and early access to Vault — delivered monthly.
By subscribing you agree to our privacy policy. Unsubscribe at any time. We never share your information.