AlphaNote Security
AlphaNote is built for researchers who work with unpublished data and ideas that matter. Here's exactly how we protect what you create.
Encrypted in Transit
Isolated Security
Data Not Sold
You Own Your Data
All data encrypted in transit with HTTPS / TLS
Industry-standard encryption at rest for stored data
Access to systems is restricted and continuously monitored
Access to user data is enforced server-side through authenticated API routes. Database access is restricted.
Strict access controls prevent cross-client data exposure
Secure authentication required for every client
Sessions validated and protected on every request
Supabase provides authentication, database, and file storage; our primary Supabase data is hosted in Canada Central
Vercel provides application hosting; Cloudflare R2 is used for configured object-storage backups
Canadian primary storage does not mean all processing stays in Canada: AI and other service providers may process data in the United States and other countries
AlphaNote does not train AI models on your content and has not opted in to provider model-training programs
Anthropic generates AI responses; OpenAI provides embeddings and other configured AI functions
Anthropic does not train on commercial API inputs or outputs by default; its policy has exceptions for explicit opt-in and feedback or bug reports submitted to Anthropic
Anthropic normally deletes API inputs and outputs within 30 days of receipt or generation, subject to its published feature, agreement, safety, and legal exceptions
Your personal information and User Content are not sold
Information is disclosed only to service providers that operate AlphaNote, when you direct us, for security, or when legally required
Authorized personnel access User Content only when needed to operate, secure, or support the Service
You retain full ownership of your data at all times
Delete your data at any time from within the app
Delete content or your account; content is removed from active systems when the deletion request is processed
Backup copies of deleted content are scheduled for permanent deletion 30 days after deletion, through our scheduled backup purge; database-provider backup cycles may expire sooner
Billing, security, and legally required records follow separate retention rules described in our Privacy Notice
Hosted on infrastructure with state-of-the-art monitoring
Designed for long-term reliability to protect your work
Industry best practices for application and data security
Security certifications and compliance scope expanding as we grow
Have questions about how your data is handled or want to understand our security posture better?
team@alphanote.ca