Last updated 20 October 2026

Security and your data

This page says plainly what NoteMaker does today, what it does not, and how to get more detail. It describes the product, not a certification. For the legal terms, read the privacy policy and the terms of use.

Where your data is

• The hosted app runs on Railway, currently in Singapore. The database and uploaded files are in the same region. Our privacy policy lists the providers we use.
• Each workspace has its own members, storage and AI budget, separated from other workspaces.
• Deleted pages go to the trash and can be restored. Permanently deleted content is removed from the database, and copies may remain in backups for up to 30 days.
• You can export your content at any time (Markdown, HTML or PDF), and nothing is deleted when a plan lapses, so you are never locked in.

Access

• Sign in with email and password, Google, Microsoft or GitHub. Any account can add two-factor authentication.
• Roles: owner, admin and member. Pages start private to their creator. Sharing is by person, by workspace or by public link, at view, comment or edit level.
• Only people you add can edit. A page you publish can be read by anyone with the link, without an account.
• Page history records who changed what and lets you restore an older version.
• A page, collection, form or card can be locked. A locked item cannot be changed by anyone, its author included, until its creator or an admin unlocks it.
• The audit log (on plans that include it) shows owners and admins who signed in, shared, exported, deleted or changed what, and who opened or downloaded things. Each event is chained to the one before it, so a changed or removed event can be found with a built-in integrity check, and new events can be sent to your own log system, signed. Events are kept for 365 days unless your plan says otherwise. It does not record searches, comments or visitors reading a published page.
• Passwords are stored hashed, stored secrets such as API keys are encrypted, traffic uses HTTPS, and outgoing webhooks are signed so the receiver can verify them.

The AI assistant

• The assistant works inside your workspace and only with what the person using it can open.
• On Manual it asks before changing anything. Publishing, making something public and deleting always ask, in every mode.
• Administrators cannot read members’ conversations with the assistant.
• The assistant cannot change something that is locked. If it needs to, it must ask you to unlock it, and that question is asked every time, even when a chat is set to approve changes automatically.
• Requests are sent through OpenRouter to the model provider that answers. They leave our systems, so do not send content you are not willing to have processed that way.

What we do not have yet

We would rather you hear this from us.

• We are not SOC 2 or ISO 27001 certified. Certification takes time and money we have not spent yet, and we will not claim it before we have it.

Questions from your IT or legal team

Write to info@thenotemaker.com with your questionnaire and we will answer in writing. Report a security problem to support@thenotemaker.com.