Abstract: Files are striped across multiple disparate data repositories. Metadata is stored hierarchically in a tree data structure to allow retrieval and reassembly of the files from the multiple repositories. The metadata is at least partially encrypted. The hierarchical tree data structure may be traversed without decrypting file identifying information. In this way, a file storage coordinator may quickly traverse the metadata without compromising the security of the striped files. Identification and retrieval of files associated with the metadata requires access to a decryption key, generally unavailable to the file storage coordinator. The metadata may be striped across the repositories in much the same way as the files are striped.