Security

Hosting

Brain Dump runs on Cloudflare. The web app and API run on Cloudflare Workers. Data lives in Cloudflare D1 (the database) and Cloudflare Vectorize (the search index). Live updates run on Cloudflare Durable Objects and background jobs on Cloudflare Queues. The primary database is in Cloudflare's eastern North America location. Requests are handled on Cloudflare's global network. We run no servers with any other hosting provider. The outside services that process data for us are listed on Subprocessors.

Encryption

• In transit: the app, API and connected AI apps are served over HTTPS (TLS). Every response sends Strict-Transport-Security for one year, so browsers use HTTPS only.
• At rest: Cloudflare encrypts all D1 data at rest with AES-256 (GCM mode), with keys Cloudflare manages.
• Connector secrets: access tokens for the tools you connect (Slack, calendars, CRMs, meeting notetakers and others) are encrypted again with AES-256-GCM before they are stored. The key is a Cloudflare secret, kept outside the database.
• Sign-in tokens: session tokens and keys for connected AI apps are stored only as SHA-256 hashes. A key is shown once, when it is created. Emailed sign-in codes are stored only as keyed hashes, tied to the one sign-in they were sent to.

Access control

• Every request is scoped on the server to one workspace, taken from the signed-in session, never from the request itself.
• Notes are private by default. A note with no Space is visible only to its owner, including to workspace owners and admins.
• A note is shared only when it is put in a Space. Each Space is Open to everyone in the workspace or Members only. A Members only Space (the default for a new Space) is visible only to the people and custom roles added to it, checked on the server for every read, search, Ask answer, AI app key and live update.
• Each person or custom role in a Space has Can view (read and search only) or Can edit (add and edit notes). Space managers set these in Space settings.
• Workspace admins do not see a Members only Space, its notes or its member list unless they are added to it. The workspace owner can join any Space, and the audit log records it.
• Removing someone from a Members only Space ends their access to its notes, including notes they wrote there; an Open Space stays readable to everyone in the workspace. Moving a note out of a Space needs Can edit. A Space's creator cannot be removed from it, and if they leave the workspace its ownership passes to the workspace owner.
• Workspace roles are owner, admin, member and guest. Owners and admins manage members, billing, the audit log, retention and single sign-on. Guests cannot create notes or Spaces, and cannot see the member list. On Scale, owners and admins can also create custom roles with per-area read/write (notes, Spaces, actions, capture, Ask, members, integrations, import) for member seats: a custom role only narrows what a member can do, never grants admin powers, and a member's private notes always stay theirs. Turning off actions read hides the to-do board and reminders on shared notes; it does not redact the text of a note the member can still read.
• Keys for connected AI apps (MCP) reach only what their owner can see right now, checked again on every request.

Authentication

• Sign-in runs through WorkOS AuthKit: Google, a work email code, a magic link, or a passkey. Brain Dump never sees or stores a password.
• Two-step sign-in is on every plan. A passkey or single sign-on counts as the second step on its own. Any other sign-in can add one with a 6-digit code we email you (Settings → Security). A code works once, for 10 minutes, only in the sign-in it was sent to, and stops after 5 wrong tries. Sending codes is rate-limited.
• Owners and admins can turn on "Require two-step sign-in" for the workspace, once their own sign-in has a second step. Everyone without one is then asked for an emailed code before they can open the workspace, switch into it or accept an invite to it, and AI app keys created without one stop working until a new key is created. Capture by email, text, Slack and meeting notetakers keeps working, because each channel checks its own proof of the sender. Owners and admins see how each member last signed in (passkey, SSO, email code or none) in the member list.
• A verified email address is required to create an account or link one to an invite.
• The session cookie is HttpOnly, Secure and SameSite=Lax, and lasts up to 30 days. Signing out ends the session in Brain Dump and in WorkOS. Writes from another site are refused. A second cookie, bd_in, holds only "1" while you are signed in, so the public pages can offer "Open app"; it grants no access.
• Single sign-on is included on Scale. On Startup Team it is a paid add-on. We set it up with you either way: email sales@getbraindump.app. SCIM provisioning is on the roadmap; there is no date yet. Once we turn it on for your workspace, single sign-on (SSO/SAML) with your identity provider is set up through the WorkOS Admin Portal. Only domains WorkOS has verified count. "Require SSO" makes members on those domains sign in through SSO, and ends their sessions in the workspace and AI app keys that were not created through SSO.

Audit log

Owners and admins can review the audit log in Settings and download it as CSV. Each entry records who acted, what they did, what it affected and when, and most entries record the IP address. It covers billing changes, member invites, role changes and removals, Space access changes and deletions, exports, workspace and account deletions, retention, SSO and two-step sign-in changes, AI app keys created and revoked, every AI app tool call, and Ask queries. Every plan shows the last 30 days; Scale shows the full history. Entries are kept for 400 days.

Data lifecycle

• Export: anyone can export every note they own, except notes in a Space they were removed from. Owners and admins can export the workspace, which leaves out other members' private notes.
• Retention: on Scale, an admin can set a policy that deletes notes older than 30 to 3,650 days. It starts 7 days after it is saved.
• Deletion: an owner can delete the workspace, and anyone can delete their account. Access ends at once, and either can be restored for 30 days. Data is purged from our live systems within 45 days of deletion. A deleted account's private notes are purged and its name and email removed; notes it shared into Spaces stay with the workspace.
• Uploads: original photos, voice memos and other attachments are temporary. They are deleted once their text has been extracted, and always within 24 hours. The extracted text stays in your notes.
• Backups: deleted data can remain in our database provider's point-in-time recovery backups for a further 30 days after it is purged from live systems.

AI

Brain Dump sends note text to Anthropic's API (Claude Haiku 5.5 and Claude Sonnet 5.5) to file notes and answer questions, and notepad photos so their text can be read. Anthropic does not train on API data by default. Search vectors are made by an embedding model (bge-m3) on Cloudflare Workers AI, and imported notes and backfills are quick-filed by a small model (Llama 3.2 3B) on Workers AI, so their text never leaves Cloudflare for that step. We do not use your content to train AI models. If you use Talk to your brain (voice mode), your voice audio and the conversation transcript go to xAI's realtime API (US); dictation stays on your phone.

Subprocessors

The full list, and what each company receives, is on Subprocessors.

Analytics

The public site uses PostHog (US) for page views, clicks and masked session replay. For visitors from the EU, the EEA, the UK and Switzerland it does not load until they allow it. Anyone can turn it off at any time. The signed-in app sends only user and workspace ids, the plan and named product steps. It never sends note content. Details are in the privacy policy.

Reporting a vulnerability

Email security@getbraindump.app with the steps to reproduce. Please give us a reasonable time to fix it before you disclose it, and do not access other people's data while testing.

Security incidents

If a security incident affects your data, we notify the workspace owner within 72 hours of confirming it.

Compliance

Brain Dump does not hold a SOC 2 report or any other security certification yet. We will say so here when that changes.