Harbor

Security

Your data, protected and yours.

Security you can actually understand — what we protect, how, and the parts where we simply can't see your data at all.

Zero-knowledge encryption — optional

Choose to encrypt a note or notebook and it's encrypted on your device (Argon2id → AES-256-GCM) before it ever reaches us. We never hold the keys, so that content is never indexed, OCR'd, or reachable by your AI, CLI, or MCP. Encrypt what's sensitive; the rest stays fully searchable.

How encryption works

Private by principle

No ads, no trackers, never sold — and your notes never train anyone's AI. Encrypted items are excluded from search, Spotlight, and Handoff, so private stays private on your own devices too.

Yours to own and leave

Full export in HTML or Evernote ENEX, a GDPR-style archive of everything, account deletion that actually deletes, and an open API and MCP. The easiest way to trust a vault is knowing the door opens from the inside.

Account security

Passkeys, two-factor authentication, Sign in with Apple and Google, and full session and device management — see every login and revoke any of them.

Encrypted in transit and at rest

Everything travels over TLS and is stored encrypted at rest, with backups. Zero-knowledge encryption is the extra lock you choose; encryption at rest protects everything, always.

Reliable and backed up

Four independent, off-site, encrypted copies of your library — two live replicas plus three months of point-in-time recovery, replicated again to colder storage. Versioned notes and conflict copies instead of silent overwrites. Losing your data is the one failure a second brain can't have — we engineer for it first.

How backups work

Want the fine print? Read the privacy policy — it's written in plain English, like everything else here.

Anchored. Private. Yours.

Trust is the whole product.

Start free and see for yourself — and if you ever want out, the door opens from the inside.

Free plan to start · No credit card