Your workspace holds your business. We treat it that way.
BlokNotes stores client records, financial documents and credentials — so security is architecture, not an afterthought. Here is how it works, in plain language.
Workspace isolation
Every workspace is a strictly isolated tenant. All queries are scoped to the workspace at the data layer, so content never crosses workspace boundaries.
Role-based access
Owner, editor and reader roles control who can manage, change or merely see. Invitations expire, and access can be revoked at any time.
Encryption where it counts
Vault secrets are encrypted with AES-GCM using keys derived from your own password (PBKDF2-SHA256) — a password BlokNotes never stores. Workspace AI provider keys are stored encrypted as well.
Data regions
Choose an EU or US data region per workspace at creation, so your content is hosted where it suits you and your customers' compliance needs.
Sharing with limits
Public notes are explicit, read-only opt-ins. Secret shares carry expiry times, read-count limits, optional passwords, full audit trails and instant revocation.
Your data leaves with you
Workspace export is built in, and generated documents support English, Dutch, French and German. Deletion flows include soft-delete protection against accidents.
Trusted building blocks
BlokNotes builds on specialized providers rather than reinventing sensitive infrastructure:
- Authentication
- Clerk — dedicated identity provider with modern session security
- Paid subscriptions
- Stripe — card data never touches BlokNotes servers
- File storage
- Cloud object storage with short-lived, pre-signed download links
- AI providers
- OpenAI, Anthropic, Google — request-scoped, no training on your content
AI and your content
AI features send only the content needed for your specific request to the model provider, under API terms that exclude training use. If you connect your own API key, requests run on your own provider account. AI-generated research findings stay marked as proposals until a human confirms them.
Current assurance status
BlokNotes does not currently claim formal certifications such as SOC 2 or ISO 27001. What you read above describes the implemented controls, not a compliance badge — and if your situation requires specific guarantees, talk to us before relying on the product for it.
Give every note a place in the work
Start a Free workspace without a credit card. Upgrade when your team, storage, or usage grows.
Explore notes, projects, tasks, and a sample calendar. No signup required. Saved in this browser.
See how objects work