Access rules live in the database
Every table has row-level security, so the database itself checks who is asking before it returns or changes a single prompt. A bug in the app can't hand your library to someone else.
Trust
Security at Nvoka
Prompts carry how your team works. Here's how Nvoka keeps them private, and what stays under your control.
Team prompts stay in the team
Owners, admins, editors and viewers, per workspace. Removing someone ends their access at once, and team prompts can't be shared by public link or published to the Public Library.
Encrypted in transit and at rest
Every connection uses HTTPS. Data is stored in Supabase's managed Postgres, encrypted at rest, and the app is served from Cloudflare's network.
Sign-in you already trust
Sign in with Google, Apple or Microsoft, whose passwords Nvoka never sees, or with an email and password that is stored hashed. Sessions are short-lived tokens that renew themselves.
Payments by Stripe
Checkout runs on Stripe, a PCI DSS Level 1 certified processor, through Link. Card numbers never touch Nvoka's servers.
Your data, under your control
Download your whole library any time, restore deleted prompts from the Trash for 30 days, and delete your account and personal data yourself in Settings.
How we build
- Every change is reviewed and runs through hundreds of automated tests before it ships. Changes to access rules come with database tests that try to reach other people's data and must be refused.
- Secret keys live only on the server. The browser gets nothing it could use to reach another account.
- Capture devices (the extension, iPhone app and Shortcut) each get their own token, stored hashed and revocable in Settings. Saved page addresses drop anything after "?" or "#".
- AI features send text to Google's Gemini models only when you use them. Nvoka doesn't train AI models on your prompts.
Report a vulnerability
Found something? Email ryan@heyitskenton.com with the details. We reply quickly and credit good-faith research. Please don't access, change or keep other people's data while testing.
Security reviews for your company
Need a questionnaire answered or have questions about how Nvoka fits your policies? We're happy to walk through it.
Talk to us