Upload controller and server-side encryption