Security
Your data, protected and yours.
Security you can actually understand — what we protect, how, and the parts where we simply can't see your data at all.
Zero-knowledge encryption — optional
Choose to encrypt a note or notebook and it's encrypted on your device (Argon2id → AES-256-GCM) before it ever reaches us. We never hold the keys, so that content is never indexed, OCR'd, or reachable by your AI, CLI, or MCP. Encrypt what's sensitive; the rest stays fully searchable.
Private by principle
No ads, no trackers, never sold — and your notes never train anyone's AI. Encrypted items are excluded from search, Spotlight, and Handoff, so private stays private on your own devices too.
Yours to own and leave
Full export in HTML or Evernote ENEX, a GDPR-style archive of everything, account deletion that actually deletes, and an open API and MCP. The easiest way to trust a vault is knowing the door opens from the inside.
Account security
Passkeys, two-factor authentication, Sign in with Apple and Google, and full session and device management — see every login and revoke any of them.
Encrypted in transit and at rest
Everything travels over TLS and is stored encrypted at rest, with backups. Zero-knowledge encryption is the extra lock you choose; encryption at rest protects everything, always.
Reliable and backed up
Four independent, off-site, encrypted copies of your library — two live replicas plus three months of point-in-time recovery, replicated again to colder storage. Versioned notes and conflict copies instead of silent overwrites. Losing your data is the one failure a second brain can't have — we engineer for it first.
Want the fine print? Read the privacy policy — it's written in plain English, like everything else here.
Anchored. Private. Yours.
Trust is the whole product.
Start free and see for yourself — and if you ever want out, the door opens from the inside.
Free plan to start · No credit card