Your work stays yours.
How we protect accounts and data.
Account protection
Two-step verification with an authenticator app, backup codes or a passkey, new-device alerts and sign-in lockouts.
Your data, your account
Files and app data live in your own account and are never sold or used for ads.
Private calls
Meetings and huddles run directly between participants, with a waiting room for guests.
Sharing controls
Share with people, set view or edit access, add expiry or a password to a link, and revoke any time.
Organisation policies
Admins can require two-step verification and manage who can share outside the team.
Passwords and sessions
Passwords are stored as salted scrypt hashes. Sessions are signed tokens, and repeated failed sign-ins are locked out.
Encrypted in transit
Traffic to Nubo uses TLS (HTTPS). Data is hosted by Hetzner in Helsinki, Finland. We do not claim end-to-end or zero-knowledge encryption.
Activity records
Security events are recorded so you can see what happened and when.
Report a vulnerability
If you think you found a security issue, write to support@nubo.email and read our Responsible Disclosure Policy. Please do not test against other people's accounts.