Security & Data Integrity
Our architectural commitment to protecting your documents, sessions, and data.
1. Security Architecture
Notling is built with a local-first philosophy. Your workspace data is processed locally with instant UI reactivity and backed by robust server-side data protection.
2. Transport & Storage Encryption
All data transmitted between your browser and Notling servers is encrypted in transit using industry-standard TLS 1.3 encryption. Database records and S3 media uploads are encrypted at rest.
3. Access Controls & Permissions
Workspace access is governed by strict user authentication and granular sharing roles (Owner, Editor, Viewer). Shared document links enforce permission checks server-side on every request.
4. Anti-Wipe Data Integrity Shield
Notling incorporates an automated Anti-Wipe Shield that validates client sync payloads before committing updates to PostgreSQL, guarding against blank payload wipes or sync loss.
5. Reporting Vulnerabilities
If you discover a potential security issue in Notling, please report it responsibly by contacting our team. We investigate all security reports promptly.